Associate Engineer I | On-site, Bangalore

The Associate Engineer - Security Automation/SOAR will be responsible for updating customer work requests and following operating procedures to perform AFC support tasks including health checks, reporting, work ticket acknowledgment and assignment, basic troubleshooting and other tasks as required for AFC service health and operation. The Associate Engineer will contribute to the development of knowledge base and troubleshooting information to expand the efficiency and performance of AFC services. This role requires the ability to develop skills on multiple security products and work closely with the staff of higher tiers, Service Delivery, and clients to provide ongoing communication of status and timely response to deliverables.

How you'll make an impact:

• Hands on opportunity of implementation and development of SOAR solutions like Swimlane, Cortex XSOAR, Tines, devo, Exabeam SOAR, Splunk SOAR etc
• The primary purpose of this role is to act as the orchestration strategist in identifying incident response activity where mitigating controls would be automated.
• Identify mitigating controls through repetitive manual processes within the SOC Analyst community that complies with client security policy and industry best practices
• In concert with Senior Developers , within the "Proactive Hunting" process, translate complex, and non-complex Incident Response event patterns into an automated process mitigating control
• In coordination with SOC Operations, Service Delivery Manager, and Application Development Engineers, produce the requirements necessary to translate manual Incident Response events into automated mitigating controls using several industry standard platforms, research patterns to gain decision making criteria, and coding languages.

What we're looking for:

• BE / BTech / ME / MTech/MCA in Computer Science or technology-related degree or equivalent work experience.
• 0 to 2 years of progressive software development or web development or security automation experience
• Understanding of security automation and development using opensource technologies
• Hands-on coding experience in the implementation of complex programming custom workflows.
• In-depth knowledge of algorithms, data structures, design patterns, and their applications.
• Solid programming background in Python, NodeJS, TypeScript, JavaScript, or other object-oriented languages.
• Strong NoSQL database and SQL knowledge including MongoDB, Postgres, or MySQL.
• Hands-on experience in any one of cloud platforms such as AWS, Azure or GCP and DevOps technologies including Kubernetes, Docker, and Terraform.
• Experience in an Agile DevOps engineering environment that effectively uses CI/CD pipelines (Jenkins, GitLab, Github).
• Experience on SOAR tools like Swimlane, Splunk SOAR, XSOAR is good to have.
• The candidate will most likely have spent time in every role of the SOC Operations, operating model
• Understand the computational decision making process in automating complex scenarios
• Strong collaboration skills that in turn translates efficient processes into automated decision making functions and determinations through the use of a wide range of industry standard platforms, data mining strategies, and investigative tools
• Excellent written and oral communicating skills
• Unrivalled ability to work with highly complex, technical individuals to translate computing technology into everyday communication topics
• Ability to explain highly technical standards, and solutions to junior personnel, and senior leadership
• Comprehend complex data sets, and create own algorithms if necessary to accomplish tasks
• Experienced in writing requirements documentation for data programming solutions
• Focus is developing automation scripts to interconnect security systems using a proprietary platform that uses python code to configure automation actions
• Security background preferred
• Experience in REST APIs, Data storage