Resident Consultant; XSOAR Specialist

Summary

This role serves as the primary technical and operational Subject Matter Expert (SME) for Automation, Integration, and Playbook development, collaborating with multiple teams to ensure successful outcomes.

• Provide technical and thought leadership, optimizing processes and systems.
• Support pre-sales, sales, and business development for new and existing services.
• Collaborate with internal peers and external stakeholders to implement and deliver cyber defense services.
• Assist in the Service Transition process, ensuring smooth transitions for customers and infrastructure into operations.
• Work proactively and collaboratively with peers for mutually beneficial outcomes.
• Support the detection, mitigation, containment, and response to cyber security incidents through effective integration and capabilities of assets.
• Create, optimize, and document processes, procedures, and workflows; track and report SLAs, KPIs, and OLAs.
• Initiate, support, and manage incidents, problems, risks, and compliance activities; available 24/7 as needed.

• Degree in Computer Science, Information Systems, Electrical Engineering, or a related field.
• Depth of skills in at least three areas:
  Security Controls Operations, Cyber Incident Response, Cyber Security Detection, Managed Services Integration, Cyber Threat Intelligence, Threat Hunting.
• 4+ years experience in PAN Cortex XSOAR (Demisto SOAR).
• Working Knowledge of Cyber Threats, Threat Actors, TTPs and how to mitigate threats in different contexts (on-prem, cloud, distributed).
• ITIL Accreditation (or relevant experience).
• Expert skills across SIEM, NGFW, CTI, WAF, plus O365 and service management tools.
• Experience in the design, implementation, maintenance and optimization of custom Playbooks for the detection, protection, containment, and mitigation of Cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, Power Shell.
• Expert skills in Information Security Technologies (e.g., SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, Service Management Tools, and the interfaces provided by IT & security systems that can be used for integration, automation, and orchestration.
• Certifications:
  
  Mandatory (PCSAE OR PCSE)

• Location:
  
  Abu Dhabi - UAE
• Team Structure:
  Collaboration with Cyber Defense, Platforms & Architecture, and Managed Controls teams.