🤖 15+ AI Agents working for you. Find jobs, score and update resumes, cover letter, interview questions, missing keywords, and lots more.
Cookies & analytics consent
We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.
Read how we use data in our Privacy Policy and Terms of Service.
🤖 15+ AI Agents working for you. Find jobs, score and update resumes, cover letter, interview questions, missing keywords, and lots more.
GSS HR SOLUTIONS PRIVATE LIMITED • Western Province, Sri Lanka
Role & seniority: Lead Automation Engineer (senior-level, lead role)
Stack/tools: Torq Hyperautomation and other SOAR platforms (XSOAR, Splunk SOAR, LogicHub, Swimlane); JSON manipulation/parsing; API integrations; SIEM/EDR/XDR tooling; Python/PowerShell/Bash; REST/JSON APIs; webhook automation; CI/CD pipelines; cloud platforms (AWS/Azure/GCP)
Develop and optimize scalable automation workflows within Torq or other SOAR platforms
Build API integrations between security tools (SIEMs, EDR/XDR, case management, cloud services) and enable seamless data exchange
Streamline incident response automation to reduce MTTR and improve event correlation; design fault-tolerant processes; lead migrations and CI/CD improvements
Must-have skills: 1+ year in security automation/SOAR or cybersecurity automation in MSSP/DFIR/enterprise; strong JSON design, parsing, and data transformations; scripting in Python/PowerShell/Bash; API development/integration (REST/JSON); experience with SIEMs and EDR/XDR tools
Nice-to-have: multi-client MSSP/IR experience; hands-on with Torq, XSOAR, Splunk SOAR, or similar; relevant certifications (Torq SOAR Analyst/Expert, Security+, cloud security certs); JQ data filtering; CI/CD familiarity (Azure DevOps); cloud security automation; experience leading SOAR migrations and cross-platform playbooks
Location & work type: Location: Sri Lanka; full-time role focused on 24/7 SOC/IR automation work (on-sit
Lead Automation Engineer
Role Definition · We are expanding our Automation Team and are seeking a skilled Automation Engineer with experience in SOAR or Hyperautomation platforms within an MSSP, Incident Response (IR), or multi-client security environment. · This role will focus on developing, managing, and optimizing automation workflows using Torq Hyperautomation or similar SOAR platforms. · The ideal candidate will be highly proficient in JSON manipulation, API integrations, and case management automation, ensuring seamless data exchange between security tools. · This position will be based in Sri Lanka and will be instrumental in building scalable automation for our 24/7 SOC and IR operations.
Skills & Ability Must-Have Skills & Experience · 1+ years of experience in security automation, SOAR engineering, or cybersecurity automation within an MSSP, DFIR, or enterprise security environment. · Extensive experience working with JSON, including JSON schema design, manipulation, parsing, and API-based data transformations. · Strong scripting skills in Python, PowerShell, or Bash for workflow automation. · Proficiency in API development and integration, including RESTful APIs, JSON-based APIs, and webhook automation. · Experience working with SIEM (Splunk, Sentinel, QRadar, Rapid7 IDR, etc.) and EDR/XDR tools (CrowdStrike, SentinelOne, Stellar Cyber, Cortex XDR, etc.).
Nice-to-Have Skills · Experience in multi-client environments (MSSP, IR firms, or security service providers). · Hands-on experience with Torq Hyperautomation, XSOAR, Splunk SOAR, or similar platforms.
· Certifications: Torq SOAR Analyst, Torq SOAR Expert, CompTIA Security+, AWS/Azure Security Certifications. · Proficiency in using JQ filters for data manipulation. · Familiarity with CI/CD pipelines (Azure DevOps) · Experience automating cloud security workflows (AWS, Azure, Google Cloud). · Familiarity with case management automation and cross-platform data normalization. · Prior experience leading SOAR migration projects or developing custom security playbooks. Show more Show less