Resident Consultant FortiSOAR Specialist

Summary

The Resident Consultant (FortiSOAR Specialist) is responsible for integrating new security logging sources, developing playbooks, and managing FortiSOAR in a Security Operations Center (SOC) environment. This role aims to enhance the response to security incidents and improve the efficiency of security teams through effective orchestration, automation, and incident management.

Main Responsibilities:

• Integrate new logging sources and build playbooks for incident response.
• Deploy, configure, manage, and monitor FortiSOAR in both dedicated and cloud environments.
• Identify and address challenges faced by customer security teams and assist with SOAR best practices.
• Design and implement dashboards, reports, and incident management processes.
• Support pre-sales, sales, and business development of services.
• Document processes, workflows, and track service level agreements (SLAs) and key performance indicators (KPIs).
• Manage incidents, risks, and compliance activities, requiring 24x7 on-call support.
  
  

• Bachelor’s Degree in Computer Science, Information Systems, or related field.
• Depth of skills in at least three of the following areas: Security controls operations, cyber incident response, cyber security detection, managed services integration, cyber threat intelligence, threat hunting.
• 4+ yrs experience in Fortinet FortiSOAR is a must.
• Experience in developing FortiSOAR connectors & playbooks.
• Experience in integrating various technologies with SOAR platform.
• Exposure to SIEM (Splunk, Sentinel, Qradar, Securonix) systems is strongly preferred.
• NSE 6 FortiSOAR Administrator or NSE 7 FortiSOAR Design and Development (Architect) certification is required.
• Experience in the design, implementation, maintenance and optimization of playbooks for detection, protection, containment and mitigation of cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, PowerShell.
• Expert skills in information security technologies (e.g. SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, service management tools, and the interfaces provided by IT & security systems that can be used for integration, automation and orchestration.