S&p global

Overview

The Senior Security Automation & SOAR Engineer will architect and develop SOAR playbooks and automated workflows to streamline incident triage, containment, and remediation processes within the Cyber Fusion Center.

About S&p global

S&P Global provides essential intelligence, data, and analytics to the world's leading organizations, empowering them to make confident decisions with integrity, discovery, and partnership.

Requirements & Eligibility

• 5+ years of proven experience designing and implementing security automation solutions in enterprise environments with hands-on SOAR platform expertise.
• Strong hands-on incident response experience with demonstrated ability to translate response procedures into scalable automated workflows.
• Strong proficiency in Python programming and experience with detection technologies such as YARA, along with REST API development and third-party service integrations.
• Deep technical expertise across security platforms including SIEM technologies, SOAR platforms, and EDR solutions.
• Hands-on experience with cloud infrastructure deployment particularly in AWS environments, using infrastructure-as-code tools.

Key Responsibilities

• Architect and develop SOAR playbooks and automated workflows to streamline incident triage, containment, and remediation processes.
• Build and maintain secure integrations across a comprehensive ecosystem of security, IT, and business platforms using APIs and custom code.
• Lead cross-functional collaboration with SOC, Detection Engineering, and Incident Response teams to identify automation opportunities.
• Deploy cloud-based security infrastructure using infrastructure-as-code practices, managing role-based access controls and disaster recovery.
• Incorporate cutting-edge AI technologies including Agentic AI and Large Language Models into security workflows.
• Produce executive-level reporting on automation performance metrics and ROI.