As SOAR (Security Orchestration, Automation, and Response) Engineer, you will be responsible for supporting partners and end customers during the post-sales lifecycle from deployment and integration to optimization and troubleshooting of distributed SOAR platforms.

You will work closely with channel partners, vendors, and internal team to ensure successful onboarding, deployment, and operationalization of SOAR solutions, ensuring a high-quality customer experience.

Responsibilities:

• Solution Implementation: Lead deployment, configuration, integration, and tuning of SOAR platforms at customer environments (on-premises, cloud, or hybrid).

• Partner Enablement: Provide technical support and enablement for partners on SOAR solutions, run workshops, knowledge transfers (KT), and hands-on labs.

• Technical Support: Act as an escalation point for post-sales technical issues, troubleshoot complex SOAR deployments, and provide timely resolution.

• Customization & Playbook Development: Develop, customize, and optimize SOAR playbooks based on customer use cases and security operations processes.

• Advisory Services: Advise customers on SOAR best practices, integrations (SIEM, EDR, threat intel platforms), and automation opportunities.

• Documentation: Create and maintain deployment guides, runbooks, and troubleshooting documents for internal teams and partners.

• Feedback Loop: Work closely with vendor teams to escalate product issues and feature requests based on customer feedback.

• Continuous Learning: Stay updated with the latest cybersecurity trends, SOAR platform enhancements, and integrations.

Requirements:

• 3-5 years of relevant cybersecurity engineering experience; minimum 1-2 years focused on SOAR or Security Automation.

• Diploma/Degree in Computer Science, Cybersecurity, Information Technology, or related fields.

• Hands-on experience deploying and operating SOAR solutions (e.g., Palo Alto Cortex XSOAR, Splunk SOAR, FortiSOAR, IBM Resilient, or similar).

• Strong understanding of SIEM, EDR, threat intelligence platforms, firewalls, and other cybersecurity products.

• Scripting skills (e.g., Python, JavaScript) to develop and customize SOAR playbooks.

• Knowledge of APIs, RESTful services, and integration techniques.

• Familiarity with IT and security frameworks (MITRE ATT&CK, NIST, etc.).

• Vendor certifications in SOAR, SIEM, or cybersecurity platforms are highly preferred (e.g., Cortex XSOAR Certified Engineer, Splunk Certified Admin, etc.).

Nice to Have:

• Experience working in a distributor, system integrator (SI), or Managed Security Services Provider (MSSP) environment.

• Familiarity with security incident response procedures and SOC operations.

• Experience delivering technical training or workshops.

Interested candidates may send their CV to MAC (Reg No. R1221300) at anc1@anchorsearchgroup.com quoting the job title in the Subject line. We regret that only shortlisted candidates will be notified.