Job Description
What will you do?
Design and build automation workflows (playbooks) in Tines, Torq, and n8n to enrich alerts, perform triage, notifications, containment, and post-incident tasks (e.g., block indicators, disable accounts, isolate endpoints).
Integrate security tools and ecosystems: EDR/XDR, firewalls, threat intelligence feeds, cloud platforms, identity stores, messaging (Teams/Slack), and evidence repositories.
Ensure reliability of automations: robust error handling, retries, health checks, observability (logs/metrics), and secure secrets management.
Improve detection-to-response flow: enrich alerts, reduce false positives, and streamline handoffs between SIEM, SOAR, and ticketing systems (ServiceNow, Jira, etc.).
Governance and SDLC: version control (Git), code reviews, CI/CD, change management, documentation, and runbook creation.
Enable the SOC: create reusable automation bui...
Apply for this Position
Ready to join Stefanini Philippines, Inc.? Click the button below to submit your application.
Submit Application