Palo Alto Xsoar - Playbook Development Job in Rarr Technologies

Job Description : Minimum 10+ years of experience in SOC & SOAR tools specifically on Palo Alto XSOAR Well versed with XSOAR Integration aspects and custom integration with other Security tools like CrowdStrike, ServiceNow etc. Prior experience of performing automation & orchestration on XSOAR platform Experienced in developing the Playbooks & SOPs Experienced in requirement elicitation and drafting the architecture & design artefact Knowledge on how to configure XSOAR dashboard & custom reports Ability to configure custom dashboard Configuration of MTTD (mean time to detect) & MTR (Mean time to response) based metrics Provide support to the Security Incident Response Team and SOC in the effective detection, analysis, and containment of attacks, as well as researching potential IOCs and linking to intelligence Monitoring of security procedures and practices; recommend optimizations and improvements when gaps are identified Collaborate with Monitoring and Incident Response team & Content Engineering team to build proactive detection logic for threat detection Assist the SOC Monitoring & IR team in analysis and resolution of Major incidents. Escalate true positives to Incident status and assist in relevant incident response Collaborate with IR team to recommend and mitigate the effects caused by an incident. Perform technical cyber security investigations on security incidents, root cause analysis and deep dive analysis of malicious artifacts, analyze threat intelligence, identify TTP and attack patterns. Help mature the Security Incident Response process to ensure it meets the needs of the global business and is adhered to.