Security Automation and Orchestration (SOAR) Engineer

Dublin, IrelandOn siteToday

Job description

- Full Time Permanent position - Hybrid role based in our City Centre offices ## Benefits - We have embraced a hybrid working model for most of our positions, which means that you can enjoy a balanced approach of working from home for part of the week and working from the office for the remainder of the week. - We offer a comprehensive benefits package including competitive salaries and bonuses, robust Learning and Development support, excellent Defined Contribution pension and comprehensive Wellbeing initiatives and support to name but a few. - Further details on our benefits package can be accessed here Benefits (life-careers.com) ## Role Overview As a Security Orchestration, Automation and Response Engineer at Central Technology Services within Canada Life Group, you will be responsible for create, configure, run and maintain automation playbooks, review alerts coming from cloud security tooling, perform enrichment and escalate suspicious or complex cases to senior analysts. This role involves utilizing various technologies and tools, as well as engaging with stakeholders to secure and monitor the cloud and on prem infrastructure. This role will also be optimising and customising cloud security technologies. - This role requires a strong foundation in cloud computing technologies, automation, and a passion for optimizing and scaling on prem and cloud platforms. This role requires a blend of technical expertise and a strong ability to deliver through automation. - The role often involves working closely with SOC analysts, incident responders, cloud engineers and assisting platform and development team members of the different business for monitoring and implementing automated responses. - It also requires communication and feedback to line management, change and service management and project management on progress. It is a busy role and requires excellent time management and prioritisation skills. ## What you will help us to achieve Support the deployment, configuration and day to day operation of the CNAPP (Cloud Native Application Protection Platform), helping to identify and track cloud security risks across IaaS, PaaS and container workloads. Monitor CNAPP dashboards and alerts for misconfigurations, vulnerabilities and compliance issues. Perform initial triage and enrichment of findings and escalate to senior team members where required. Help reduce noise by tuning out false positives and aligning policies with agreed standards Implement security best practices and compliance controls to protect cloud-based platforms from cyber threats and vulnerabilities. Develop and maintain SOAR workflows to perform automated security tasks. Manage all elements of the SOAR platform including troubleshooting, maintenance and upgrades. Help maintain integrations/connectors between SOAR and other tools Create and execute automation playbooks Keep documentation for integrations and workflows up to date Collaborate with IT teams, system administrators, and other stakeholders to ensure seamless integration and operation of security controls. Collaborate with internal and external stakeholders, including business units, to monitor resolution of findings. Monitor, troubleshoot and optimize cloud security controls and automation workflows. Proactively engage with stakeholders to identify opportunities for cloud security optimization and improvement to meet business needs. Documentation and Knowledge Sharing: Share knowledge and best practices with team members through training sessions and workshops. Develop and maintain PowerBI reports using Azure Data Factory.