Threat Automation Engineer

Threat Detection and Automation Senior Security Analyst [Pune, India] 

FNZ security technology and operations is seeking an experienced detection and automation specialist with a background in DevOps or Cybersecurity to fill a newly created role. Candidates should have hands-on experience with automation tooling and demonstrable evidence of having streamlined manual processes, ideally using a Security Orchestration, Automation, and Response (SOAR) platform. Past experience within a threat detection or SIEM engineering team would be beneficial. 

Specific Role Responsibilities  

• Automate existing security operations processes using a SOAR platform 

• Work closely with stakeholders across security and technology functions to understand requirements for automating existing manual operations through platform integrations and playbooks 

• Parse data from API integrations between vulnerability, detection, and response tools 

• Use an existing detection-as-code pipeline to deploy threat detection rules into the security monitoring environment 

• Support breach simulation activities in testing existing detection rules and creating new, custom use cases 

• Prove the functioning of new threat detection rules through testing 

• Map threat actors tactics, techniques, and procedures (TTPs) to the FNZ control environment 

• Ensure indicators of compromise are triaged and prioritised in an automated fashion. Use multiple enrichment sources in a single platform 

Experience required 

• Hands on experience of a SOAR platform and automating manual processes 

• Knowledge of threat detection and security monitoring technologies including SIEM and EDR solutions 

• Demonstrable evidence of having worked with APIs to integrate technologies and then parse the ingested data for operational use 

• Knowledge of detection rule generation processes in the SIEM 

• Understanding of the current cyber threat landscape, including relevant threat groups, TTPs, and attack vectors of relevance to financial services 

• Particularly strong analytical and problem-solving skills, with a proactive approach to identifying and mitigating security risks 

• Experience of the MITRE ATT&CK© framework for improving detective and preventative controls