Operationalize threat intelligence by managing feeds and IOCs, analyzing adversary TTPs, integrating intelligence into SIEM/EDR/firewalls, automating ingestion via APIs and scripts, supporting TIP deployment and tuning, and producing actionable alerts and reports for security teams.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.