SOAR Manager – Threat Hunting Lead

About the role

The SOAR Manager will lead the administration of Security Orchestration, Automation and Response (SOAR) solutions within our Cyber Defense Center. You will work closely with security operations teams to design, automate, and optimize incident response workflows, improving the organization’s overall cyber‑resilience.

Key responsibilities

• Administer and continuously improve SOAR platforms, ensuring seamless integration with SIEM, threat intelligence, and other security tools.
• Design, implement, and optimize automated playbooks and security workflows.
• Develop and maintain scripts (Python, PowerShell, Bash) to automate repetitive tasks and enhance tool interoperability.
• Coordinate incident response activities, providing rapid, orchestrated actions during security events.
• Analyze security data to identify patterns, drive improvements, and support threat hunting initiatives.
• Lead SOAR implementation projects, managing planning, execution, and monitoring.
• Align SOAR strategy with business priorities, driving maturity and measurable security outcomes.

Required profile

• Deep understanding of security technologies, including SOAR platforms, SIEM, and threat intelligence solutions.
• Strong knowledge of incident response frameworks and processes.
• Proven analytical thinking and problem‑solving abilities.
• Experience managing security‑related projects from conception to delivery.

Required skills

• SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk SOAR)
• SIEM solutions (e.g., Splunk, QRadar, Elastic)
• Threat intelligence platforms
• Python scripting
• PowerShell scripting
• Bash scripting

What we offer

• Opportunity to shape the security automation strategy of a leading financial institution.
• Collaborative environment with cross‑functional security teams.
• Access to cutting‑edge security technologies and continuous learning resources.