Group Specialist - Cyber Engineering Automation

KEY ACCOUNTABILITIES:

• Design and implement automated workflows and playbooks across SOC, CSPM, VM, and IAM platforms.

• Integrate diverse tools such as Sentinel (SIEM/XDR), Wiz (CSPM/CNAPP), SailPoint (IAM), Check Point (EDR/DLP), and Zscaler (SSE) using APIs and event-driven automation.

• Build automation for incident response (IR), threat enrichment, user isolation, and ticketing workflows using SOAR and orchestration frameworks (e.g., Microsoft Sentinel Logic Apps, Cortex XSOAR, FortiSOAR, or custom Python-based frameworks).

• Develop and maintain cross-platform integrations between IT, OT, and Cloud security tools for unified visibility.

• Enable real-time telemetry ingestion and correlation using APIs, data pipelines, or event hubs.

• Create reusable automation modules and templates for consistent rollout across global regions.

• Automate cloud posture monitoring and remediation (Azure, AWS, GCP) using CSPM/CNAPP APIs

- Engineer infrastructure-as-code (IaC) security controls and guardrails using Terraform, Ansible, or ARM templates.

- Integrate automation into DevSecOps pipelines for continuous compliance, vulnerability scanning, and drift detection.

- Implement AI-driven response and enrichment playbooks for phishing, malware, and insider threat cases.

- Develop automation for threat intel enrichment (VirusTotal, MISP, Recorded Future, etc.) and ticket closure workflows (JIRA, ServiceNow).

- Continuously tune automation based on MITRE ATT&CK and MITRE ATLAS techniques.

OTHER

- Act as an ambassador for DP World always when working; promoting and demonstrating positive behaviours in harmony with DP World’s Founder’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies