Resident Consultant; FortiSOAR Specialist

Summary

The Resident Consultant (FortiSOAR Specialist) is responsible for integrating new security logging sources, developing playbooks, and managing FortiSOAR in a Security Operations Center (SOC) environment. This role aims to enhance the response to security incidents and improve the efficiency of security teams through effective orchestration, automation, and incident management.

• Integrate new logging sources and build playbooks for incident response.
• Deploy, configure, manage, and monitor FortiSOAR in both dedicated and cloud environments.
• Identify and address challenges faced by customer security teams and assist with SOAR best practices.
• Design and implement dashboards, reports, and incident management processes.
• Support pre-sales, sales, and business development of services.
• Document processes, workflows, and track service level agreements (SLAs) and key performance indicators (KPIs).
• Manage incidents, risks, and compliance activities, requiring 24x7 on-call support.

• Bachelor's Degree in Computer Science, Information Systems, or related field.
• Depth of skills in at least three of the following areas:
  Security controls operations, cyber incident response, cyber security detection, managed services integration, cyber threat intelligence, threat hunting.
• 4+ yrs experience in Fortinet FortiSOAR is a must.
• Experience in developing FortiSOAR connectors & playbooks.
• Experience in integrating various technologies with SOAR platform.
• Exposure to SIEM (Splunk, Sentinel, Qradar, Securonix) systems is strongly preferred.
• NSE 6 FortiSOAR Administrator or NSE 7 FortiSOAR Design and Development (Architect) certification is required.
• Experience in the design, implementation, maintenance and optimization of playbooks for detection, protection, containment and mitigation of cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, Power Shell.
• Expert skills in information security technologies (e.g. SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, service management tools, and the interfaces provided by IT & security systems that can be used for integration, automation and orchestration.

Location:

Dubai - UAE