Senior Security Automation Engineer

Procter & Gamble•Cincinnati, OH

3d•Hybrid

About The Position

Information Technology (IT) at Procter & Gamble is where business, innovation and technology integrate to create a competitive advantage for P&G. Our mission is clear -- we deliver IT to help P&G win with the over 5 billion consumers we serve worldwide. Our IT professionals are diverse business leaders who apply IT mastery to deliver game-changing, technology-driven business models and capabilities for our 65 iconic, trusted brands. From Day 1, you’ll be trusted to dive right in, take the lead, use your initiative, and build billion-dollar brands that help make everyday activities easier and make the world a better place. You’ll be doing meaningful work that takes your career places you never imagined. And you’ll do this in creative workspaces where new ideas flourish and where your technical mastery is recognized and rewarded. The Opportunity Procter & Gamble is seeking an experienced SOAR Engineer to join our engineering organization. In this role, you will collaborate with various stakeholders to understand business requirements and strategize the utilization of automation for enhanced efficiency. Working closely with the Security Operations Center (SOC) team and Incident Response Team (IRT), you will assist in the implementation and management of SOAR technologies. As a Security Orchestration, Automation, and Response (SOAR) Engineer, you will serve a critical role in our InfoSec's Cyber Defense Technology team. You will focus on enhancing our organization's automation, orchestration, and response capabilities through the strategic use of SOAR technology. You will lead the implementation of our SOAR platform, aiming to boost our overall efficiency and effectiveness in Global Cyber Defense.

Requirements

Bachelor's Degree in Information Systems, Information Technology (IT), Computer Science, Software Engineering, other STEM field or 5+ years relevant years of experience/education
Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures in pre- and post-exploitation phases of attack lifecycles.
Proven experience in using Python for automating security operations and incident response processes.
Familiarity with working with AI tools.
Strong understanding of security architecture, tool integration, API development, and automation.
Extensive knowledge of Incident Response processes.
Familiarity with common SOC and SOAR processes and workflows.
Rich background and experience in Security Information and Event Management (SIEM) systems.
Experience with security-related datasets, log formats, and protocols.
Ability to work onsite in Cincinnati, Ohio on a hybrid work schedule.

Nice To Haves

Certifications: CISSP, CCSP, OSCP, AWS Certified Solutions Architect (Amazon Web Services), AWS Certified Developer, Relevant certifications in ML/AI

Responsibilities

Cooperate with the SOC and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions.
Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies.
Initiate new SOC automation, ensuring compatibility with existing detection and response tools.
Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time.
Design custom scripts to automate existing detection and response workflows.
Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.
Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.
Operate and mature a SOC playbook, workflow automations, and use cases.
Engage with stakeholders to identify business requirements and provide recommendations on leveraging data effectively.