Resident Consultant (XSOAR Specialist)

Summary

This role serves as the primary technical and operational Subject Matter Expert (SME) for Automation, Integration, and Playbook development, collaborating with multiple teams to ensure successful outcomes.

Main Responsibilities:

• Provide technical and thought leadership, optimizing processes and systems.
• Support pre-sales, sales, and business development for new and existing services.
• Collaborate with internal peers and external stakeholders to implement and deliver cyber defense services.
• Assist in the Service Transition process, ensuring smooth transitions for customers and infrastructure into operations.
• Work proactively and collaboratively with peers for mutually beneficial outcomes.
• Support the detection, mitigation, containment, and response to cyber security incidents through effective integration and capabilities of assets.
• Create, optimize, and document processes, procedures, and workflows; track and report SLAs, KPIs, and OLAs.
• Initiate, support, and manage incidents, problems, risks, and compliance activities; available 24/7 as needed.

Key Requirements:

• Degree in Computer Science, Information Systems, Electrical Engineering, or a related field.
• Depth of skills in at least three areas: Security Controls Operations, Cyber Incident Response, Cyber Security Detection, Managed Services Integration, Cyber Threat Intelligence, Threat Hunting.
• 4+ years experience in PAN Cortex XSOAR (Demisto SOAR).
• Working Knowledge of Cyber Threats, Threat Actors, TTPs and how to mitigate threats in different contexts (on-prem, cloud, distributed).
• ITIL Accreditation (or relevant experience).
• Expert skills across SIEM, NGFW, CTI, WAF, plus O365 and service management tools.
• Experience in the design, implementation, maintenance and optimization of custom Playbooks for the detection, protection, containment, and mitigation of Cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, PowerShell.
• Expert skills in Information Security Technologies (e.g., SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, Service Management Tools, and the interfaces provided by IT & security systems that can be used for integration, automation, and orchestration.
• Certifications: Mandatory (PCSAE OR PCSE)

Other Details:

• Location: Abu Dhabi - UAE
• Team Structure: Collaboration with Cyber Defense, Platforms & Architecture, and Managed Controls teams.