Lead SOAR Engineer Job at Take-Two Interactive Software, Inc. (Las Vegas)

Technical Engineer Lead

This role leads the Security Engineering team within ANS’s Security Operations C...

Location

Salary:

Not provided

ANS Group

Expiration Date

Until further notice

Requirements

Experience managing or leading a technical security engineering team within an MSP, MSSP or SOC environment
Proven experience with Microsoft Security Suite (Sentinel, Defender XDR, Defender for Cloud) and Sentinel setup/integration
Strong technical expertise with Microsoft Azure (Azure AD, Lighthouse, and security architecture)
Proven experience configuring connectors, setting up data ingestion, and tuning detection rules
Experience with Google Chronicle SOAR or other SOAR/SIEM platforms
Comfortable writing or modifying KQL queries, understanding detection logic, and debugging enrichment issues
Excellent communication and interpersonal skills, able to translate technical activity into customer-facing updates
High emotional intelligence able to support and guide a stretched team, while holding standards and focus
Ability to set priorities, manage competing demands and keep work structured in fast-paced environments
Prior exposure to cost control in log ingestion or cloud service consumption

Job Responsibility

Lead and schedule the SOC Engineering team to ensure clarity, consistency and manageable workloads across onboarding and live services
Own the delivery of engineering activity during customer onboarding and transition, including Sentinel connector setup, Microsoft Defender integration, rule tuning, and SOAR playbook deployment
Ensure structured service handover to SOC Analysts post-onboarding, with clear technical documentation and expectations
Act as escalation point for complex engineering-led issues in live environments, maintaining SLAs and platform health
Drive continual improvement in detection logic, rule effectiveness, enrichment, automation and engineering playbooks
Provide technical leadership in core tooling: Microsoft Sentinel, Defender for Endpoint, Defender for Cloud, Entra ID and integration platforms. Google Chronicle SOAR (technical ownership sits with SecDevOps Lead)
Champion best practices in customer environment configuration, data ingestion, and engineering change control
Bring structure to engineering reporting and team outputs, with clarity on ownership, outcomes, and next steps
Support the development of junior engineers, setting standards for communication, time management and delivery focus

What we offer

25 days’ holiday, plus you can buy up to 5 more days
Birthday off
An extra celebration day
5 days’ additional holiday in the year you get married
5 volunteer days
Private health insurance
Pension contribution match and 4 x life assurance
Flexible working and work from anywhere for up to 30 days per year (some exceptions)
Maternity: 16 weeks’ full pay, Paternity: 3 weeks’ full pay, Adoption: 16 weeks’ full pay
Company social events

Lead Security Operations Engineer

We are looking for a Lead Security Operations Engineer to design, implement, and...

Location

United States , Austin

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

5+ years’ experience as a SOAR Engineer
Deep expertise in designing, building, and maintaining automated security workflows and playbooks using a SOAR platform
The ability to analyze complex security challenges, find opportunities to automate repetitive manual tasks, and develop data-driven solutions
Excellent written and verbal communication skills
Hands-on experience with a leading SOAR platform (Palo Alto Networks Cortex XSOAR, Tines or Splunk Enterprise Security) coupled with advanced scripting skills in Python

Job Responsibility

SOAR Platform Management: Lead the design, development, and maintenance of SOAR playbooks, workflows, and integrations with other security tools
Automation and Optimization: Identify and implement automation opportunities to improve the speed and accuracy of security operations and incident response
Technical Leadership: Act as a domain expert for SOAR, providing technical guidance, mentorship, and support to the security team
Collaboration and Strategy: Partner with other security teams to ensure SOAR capabilities align with the overall security strategy
Documentation and Reporting: Create and maintain comprehensive documentation for workflows and integrations, and develop reports to measure program success
Change Management and Maintenance: Assist with SOAR tool migrations, document all system changes, and stay ahead of the latest SOAR and automation trends

What we offer

Medical (HSA & FSA), dental, vision
401(k) with company match
Employee stock purchase plan
Commuter benefits
In-house wellness program
Broad learning & development opportunities
A charitable giving platform with company match
Fitness allowance
Employee discount programs
Free games & events

Fulltime

Systems Engineer - Cybersecurity (L1)

Location

Uganda , Kampala

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

3+ years of hands-on experience in network security engineering or cybersecurity roles
Proven experience deploying and managing: Firewalls, VPNs, IDS/IPS systems Secure network architectures (on-prem and hybrid/cloud)
Experience in presales or customer-facing technical roles is highly desirable
Familiarity with multi-vendor environments (Cisco, Fortinet, Palo Alto, Check Point, F5 etc.)
Experience integrating security solutions into enterprise networks and cloud platforms (Azure, AWS etc is a plus)
Exposure to security monitoring tools and SIEM platforms (e.g. Splunk, FortiSIEM, Palo Alto Networks XSIAM)
Experience working with service level agreements (SLAs) and delivering support in production environments
Bachelor's degree in: Computer Science Information Technology Cybersecurity Electrical/Electronic Engineering (or related field)
Preferred Professional Certifications (Network Security focused) across different vendors including Cisco, Check Point, Palo Alto Networks, Fortinet, F5, Infoblox

Job Responsibility

Lead presales activities, including customer requirement analysis, solution design, technical presentations, and proposal development for security solutions (NGFWs, VPNs, NAC, SASE, Cloud Security, EDR, XDR etc)
Design and architect secure infrastructures, ensuring segmentation, least privilege access, zero trust and defense-in-depth principles
Implement and configure network security technologies such as: Next-Generation Firewalls (NGFW) Secure VPNs (IPSec/SSL) Intrusion Detection/Prevention Systems (IDS/IPS) Network Access Control (NAC) etc
Deployment and Integration of security solutions with SIEM, SOAR, and monitoring tools for centralized visibility and response
Conduct network security assessments and gap analysis
Provide technical support and troubleshooting for security incidents related to network infrastructure
Ensure continuous monitoring and optimization of network security controls
Develop and maintain technical documentation, including network diagrams, configurations, and SOPs
Collaborate with internal teams and vendors to ensure successful deployment and lifecycle management of solutions

Fulltime

Domain Consultant Cortex

Your Career As a Domain Consultant for SOC Transformation you will be the expert...

Location

Morocco , Casablanca

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

Experience in Security Operations or presales/ sales engineering within SIEM, SOAR, SOC, and/or endpoint environments
Solid understanding of Security Operations Center processes
Experience working with customers, with a client-centric approach and problem solving skills
Scripting experience is a plus - Python preferred
Native Arabic and French, strong English are must-have

Job Responsibility

Collaborate with account teams to recommend and develop customer solutions within your assigned specialization area
Present to customers as our expert at all levels in the customer hierarchy, from practitioner to senior leadership
Lead and support customer demonstrations that showcase our unique value proposition
Scope and Lead Proof of Value (PoV) projects for prospective customers based on best practices to ensure technical win in your assigned opportunities
Drive high technical validation and PoV win rates within your assigned specialization area
Architect solutions that will help our customers strengthen and simplify their security posture
Accelerate technical validation of proposed solutions within your specialization
Document High-Level Design and Key Use Cases to ensure proper implementation and value realization of Palo Alto Networks Solutions
Help our customers build and develop further their services around Cortex solutions
Lead conversations about industry trends and emerging changes to the security landscape

Fulltime

Security Architect

Opportunity to join a premier enterprise Architecture & Delivery team to steer c...

Location

Australia , Melbourne

Salary:

900.00 - 1100.00 AUD / Day

Randstad

Expiration Date

July 03, 2026

Requirements

8+ years of professional experience in IT solution design, build, or delivery, with 5+ years dedicated to IT Security, IAM, IGA, PAM, and cloud security environments
Expert hands-on experience with Entra ID (including Conditional Access Policies, Connect, B2B/B2C, ZTNA, Graph API) and Okta SSO (SAML, OIDC, OAuth)
Strong architectural knowledge of IGA platforms (SailPoint, One Identity, or Saviynt) and PAM architectures (CyberArk or Beyond Trust)
Proven understanding of identity-specific threat modelling, DevSecOps mindsets, and frameworks such as MITRE ATTCK and NIST AI RMF across hybrid cloud structures (VMware, AWS, Azure, GCP)
Tertiary qualification in IT, Engineering, or a related field, combined with an industry standard certification such as CISSP
8+ years of professional experience in IT solution delivery or design, with 5+ years focused on SIEM, SOAR, Vulnerability Management, and Continuous Threat & Exposure Management (CTEM)
Direct experience architecting and implementing solutions using Microsoft Unified SecOps Platforms, Microsoft Sentinel, Microsoft Defender XDR, and Splunk ES/SOAR
Technically proficient in securing hybrid cloud environments using native and third-party CASB, M365 E5 Security Services, Intune MDM, and Cloud Workload Protection platforms
Comprehensive knowledge of security and architecture frameworks including TOGAF, SABSA, MITRE Atlas, NIST RMF, ISO 27001, ISM, and ASD Essential 8
Tertiary qualification in IT, Computing, or Engineering, with highly regarded certifications such as CISSP, AWS Security Specialty, Microsoft AZ-500, or Microsoft SC-100

Job Responsibility

Architect and implement modern identity and access management (IAM) models leveraging Entra ID, Ping Identity, and auxiliary technologies
Deliver secure solution architecture artefacts (such as SAR, SOAP, and NFRs) tailored for identity portfolio epics
Design and enforce robust network validation and enterprise authentication policies, including SSO, MFA, Conditional Access, and Passwordless Authentication
Lead enterprise migrations involving legacy infrastructure upgrades, Exchange transitions, and broad application onboarding to Entra ID
Govern and design solutions for Privileged Identity Management (PIM) and Privileged Access Management (PAM) to secure elevated credentials
Automate identity lifecycle processes (Joiner-Mover-Leaver) and configure rigid RBAC models and compliance access reviews
Define the secure implementation strategy and construct security controls aligned with Microsoft Azure and M365 E5 Security Services
Architect and implement SecOps solutions using Microsoft Defender, Microsoft Sentinel, Unified SecOps Platform, Microsoft Security Copilot, and Splunk ES/SOAR
Deliver end-to-end solution architectures and architecture documentation for assigned SecOps portfolio epics
Integrate and optimize Azure Sentinel to advance threat detection capabilities, incident response mechanisms, and AI security defense analytics

!

Security Analyst Data Protection Platform

The Manager, Security Platform Engineering is a management role, responsible for...

Location

India , Hyderabad

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Advanced experience in leading and managing Security teams
Advanced experience in Security technologies like (Firewall, IPS, IDS, Proxy etc.)
Advanced experience in technical support to clients
Advanced experience in diagnosis and troubleshooting
Advanced experience providing remote support in Security Technologies
Advanced experience in SOC/CSIRT Operations
Advanced experience in handling security incidents end to end
Knowledge on networking, Linux and security concepts
Advanced experience in configuring/managing security controls such as Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, HoneyPots and other security tools
Knowledge on log collection mechanism such as Syslog, Log file, DB API

Job Responsibility

Works as part of a 24/7 team that works on a rotational shift basis
Works as part of Platform and Content Engineering handling tunings, stakeholder requests, escalations, reporting, trainings
Administration of the organizational security tools to gather security logs from environment
Life cycle management of the supported security tools/technologies, Break-fix, Patching, Live update
Creates SOPs and notify stakeholders
Documents best practices
Identifies opportunities to make automations which will help the incident response team
Performs hiring and staffing of high-quality engineers
Ensures all team members are trained on all aspects of the service
Ensures all team members are trained on customer service skills

Fulltime

Staff Security Analyst, Threat Intelligence

We are building an elite team, applying frontier technologies to the world’s big...

Location

United States , Menlo Park

Salary:

191000.00 - 225000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

8–12+ years of total experience, including 3–5+ years operating at a senior or staff-level scope in threat intelligence, brand protection, or cyber investigations
Hands-on experience tracking criminal ecosystems tied to phishing, scams, impersonation, fraud, and infrastructure abuse, and the ability to move from isolated indicators to campaign- and actor-level analysis
Deep familiarity with domain registration patterns, DNS and certificate transparency analysis, cloud and hosting abuse across providers (e.g., AWS, GCP, Azure, VPS), and attacker monetization methods
Experience using OSINT tooling, SQL, Python, notebooks, SIEM or SOAR platforms, OpenCTI, and case management systems to analyze data and automate workflows
Ability to translate complex technical threats into clear business risk for technical teams and executive audiences through strong written and verbal communication
Experience mentoring others or leading initiatives across teams, with a high level of accountability and sound risk judgment in ambiguous situations

Job Responsibility

Proactively hunt and map criminal ecosystems targeting Robinhood and its customers, then translate intelligence into scalable systems and coordinated defenses that disrupt adversaries before they cause harm
Build and operationalize a comprehensive "Universe of Threats" by identifying, tracking, and prioritizing adversaries across phishing, scams, impersonation, fraud, and infrastructure abuse
Establish and mature a proactive threat intelligence lifecycle by developing industry partnerships, collaborating with trusted peers and federal authorities, and cultivating online personas to generate early warning capabilities that protect Robinhood’s business operations
Investigate attacker infrastructure across domains, DNS, certificate transparency logs, cloud providers, and telecom platforms, and convert findings into concrete detections, controls, and customer protections
Coordinate threat actor infrastructure takedowns with hosting providers, domain registrars, cloud platforms, and other infrastructure partners to disrupt adversary operations at scale
Design and automate intelligence workflows using OSINT tooling, enrichment pipelines, data analysis tools, and case management systems to scale analysis and reporting
Partner directly with Detection & Response, Automation, Customer Trust & Safety (Fraud and Financial Crimes), Security Engineering, Corporate Security, Risk, and executive leaders to prioritize threats based on measurable business risk

What we offer

Challenging, high-impact work to grow your career
Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more
Exceptional office experience with catered meals, events, and comfortable workspaces

Fulltime

Domain Consultant 2 - Cortex Cloud

As a Domain Consultant for SOC Transformation you will be the expert for our Cor...

Location

Germany , Munich

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

Experience in Security Operations or presales/ sales engineering within SIEM, SOAR, SOC, and/or endpoint environments
Solid understanding of Security Operations Center processes
Experience working with customers, with a client-centric approach and problem solving skills
Scripting experience is a plus - Python preferred

Job Responsibility

Collaborate with account teams to recommend and develop customer solutions within your assigned specialization area
Present to customers as our expert at all levels in the customer hierarchy, from practitioner to senior leadership
Lead and support customer demonstrations that showcase our unique value proposition
Scope and Lead Proof of Value (PoV) projects for prospective customers based on best practices to ensure technical win in your assigned opportunities
Drive high technical validation and PoV win rates within your assigned specialization area
Architect solutions that will help our customers strengthen and simplify their security posture
Accelerate technical validation of proposed solutions within your specialization
Document High-Level Design and Key Use Cases to ensure proper implementation and value realization of Palo Alto Networks Solutions
Help our customers build and develop further their services around Cortex solutions
Lead conversations about industry trends and emerging changes to the security landscape

Fulltime

Select Country

Lead SOAR Engineer

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?