Cyber Security Specialist
Summary
Colombo,
Sri Lanka
On-Site
LKR
-
850000
Full-time
Category
Other
Share job
Roles & Responsibilities
Client : UK
Reporting : USA
Job Title: Senior Security Automation Engineer
Level : T2 Level
Experience : 6 – 8 plus years of experience
Our client is expanding its global Security Automation Team and is looking for an experienced Senior Security Automation Engineer to design, develop, and enhance automation workflows across SOC and Incident Response operations.
The ideal candidate will have hands-on experience with Hyperautomation platforms, strong API integration skills, and a passion for building scalable, efficient, and resilient automation solutions for 24/7 security operations.
Mandatory Skill ( 100% hands on experience required)
- Hyper Automation
- Torq.AI
- SentinelOne
- EDRS / XDRS
Other Skills (Optional)
- RPA background (Automation with a cyber security focus)
- Someone who started with Standard cyber security then moved to Optimizing Automation
Key Responsibilities
- Design, develop, and optimize automation workflows on Hyperautomation platforms (e.g., Torq, XSOAR, Splunk SOAR, LogicHub, or Swimlane).
- Build API integrations between key security systems — SIEMs, EDRs, XDRs, and case management tools.
- Work extensively with JSON parsing, transformation, and data orchestration between tools.
- Automate incident response and threat management workflows to reduce manual effort and response time.
- Maintain and improve CI/CD pipelines within SOAR platforms for seamless deployments.
- Collaborate with SOC, DFIR, and Threat Intelligence teams to refine and extend automation capabilities.
- Participate in migration and enhancement projects for automation platforms, ensuring smooth transitions.
- Continuously research and apply new automation methods to strengthen SOC and MSSP operations.
Pre Requisites
- Minimum 6 – 8 year of hands-on experience in security automation, SOAR development, or cybersecurity engineering within an MSSP or enterprise environment.
- Degree in Cyber Security / Cloud Computing (Cloud Security specialization) / Information Security
- Strong expertise in Python, PowerShell, or Bash scripting for automation.
- Proficiency with APIs (RESTful, JSON-based, webhook integrations).
- Deep understanding of JSON structures, transformations, and schema design.
- Familiarity with leading SIEM and EDR/XDR platforms such as Splunk, Sentinel, QRadar, Rapid7, CrowdStrike, or Cortex XDR.
- Solid knowledge of incident response and threat lifecycle management.