Security Automation Specialist / SOAR Consultant

International Pharmaceutical Company

• 2–3 years of experience in Security Operations, Security Engineering, Security Automation, SOC, or a similar area.
• Hands-on experience with at least one SOAR platform, e.g., Torq, Palo Alto XSOAR, Splunk SOAR, Tines, Swimlane, or another comparable solution.
• Practical SOAR experience and willingness to learn Torq.
• Good understanding of SOC processes and incident response workflows.
• Experience with REST APIs, JSON, authentication mechanisms, and webhooks.
• Experience with at least one SIEM platform such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
• Knowledge of EDR technologies like CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black.
• Scripting skills in Python, PowerShell, or a similar language.
• Familiarity with Azure, AWS, or GCP.
• Very good communication skills and ability to work independently in an international environment.
• Fluent English.

• Designing, maintaining, and improving automated security workflows within a SOAR environment.
• Supporting SOC and incident response processes through automation.
• Handling security-related tickets, operational requests, and workflow issues.
• Automating use cases such as phishing, malware, suspicious authentication activity, and other security alerts.
• Integrating security tools using REST APIs, webhooks, and custom connectors.
• Enriching alerts with data from SIEM, EDR, identity, ticketing, and threat intelligence platforms.
• Troubleshooting and optimizing existing security automations.
• Working with security teams to identify processes that can be automated and improved.
• Building hands-on expertise in Torq as part of the project.

Please apply safely through this portal in accordance with GDPR. Employment agency Nr 17138.