Job Description

Responsibilities :

• Plan and manage workload and playbook updates (releases).
• Work with multi-disciplinary teams.
• Document the design and solution being developed.
• Occasionally present (a slide-deck) of the solution(s) being developed (or already delivered) to other team members.
• Automate incident response.
• Develop use-cases and integrations to interface with various SOC tools.
• Develop new features and bug fixes.
• Develop an automated SOAR monitoring and reporting infrastructure. (Planned)
• Manage and support SOAR technology across various business units.
• Advise the organization about security treats, anomalies, and other issues with the SOAR platform.
• Support customer onboarding.

SOAR and FortiSOAR

People Skills :

• Strong interpersonal communication skills and the ability to communicate with clients, vendors and partners, and across all levels of the organization.
• Ability to interact, develop, engineer, and communicate at technical levels.
• Strong oral and written communication skills (in English) (Communication).
• Ability to create and update new or existing processes (often for the benefit of others). (Collaboration)
• Willing to learn and accept new and different ways of working and accept feedback. (Collaboration)
• Capable of planning ahead and evaluate work load. (Time Management)
• The candidate can plan and manage multiple work streams, set priorities and remain efficient.
• Capable of managing work from several different projects simultaneously. (Organization)
• The candidate may have to manage work from unrelated projects and remain efficient. (Multi-tasking)
• Capable of working autonomously and remain accountable. (Efficiency)
• The candidate’s work will progress with minimal supervision.
• The candidate can search and inquire without being told.
• Works well under pressure and time constraints.

Technical Skills:

• Hands-on experience with network infrastructure solutions and technologies.
• LAN/WAN, VPN, SDN, SD-WAN
• hardware (switches, routers, firewalls)
• software-defined networks
• server virtualization, cloud networks
• Hands-on experience writing network interface or infrastructure software.
• Must have good knowledge of network subsystems interconnect technologies and protocols.
• Layer-3 networking, IPv4, TCP/IP, OSI model, LDAP
• REST API, GraphQL, JSON file format
• Firewall operations (conceptually)
• Must have working experience with Linux systems.
• FortiSOAR runs on CentOS linux.
• The candidate may have to investigate issues using the linux command line and/or write code requiring knowledge of linux.
• Programming/scripting experience in Python (and other programming and scripting languages and technologies).
• Playbooks and connectors require a very good knowledge of Python and Jinja.
• Automated and helper scripts require knowledge of Python, Bash and other programming tools.
• Must have excellent debugging and problem solving skills.
• Must have knowledge of database concepts.
• SQL queries are used by many FortiSOAR playbooks to access database records.
• Must have working experience with Git/Gitlab.
• Must have working experience with Agile process (Jira)
• Must have interest in cybersecurity.

Nice to Have:

• SOC experience
• Experience with Fortinet technologies
• SIEM (Security Information and Event Management)
• SOAR (Security Orchestration, Automation and Response)
• Experience utilizing the MITRE ATT&CK framework.
• Ticketing systems (Jira, Maximo, etc…)
• ISO 27001