Cyber Incident Automation Engineer (37046)

Cyber Incident Automation Engineer | Central Israel

Mertens, a MalamTeam company, is looking for an experienced Cyber Incident Automation Engineer to join a leading organization in Central Israel

The role includes leading complex cyber investigations End-to-End, performing Digital Forensics across endpoints and networks, analyzing attack techniques, persistence mechanisms and attacker movement, and developing automated response processes to enhance organizational cyber capabilities

Responsibilities

Lead complex cyber investigations End-to-End

Perform Digital Forensics investigations across endpoints and networks

Analyze attack techniques, persistence mechanisms, and attacker movement

Develop automated response processes and SOAR Playbooks

Build integrations between information security systems using APIs

Improve Incident Response processes

Work with Python, SOAR, DFIR, API, SIEM, XDR, Cortex XSOAR, QRadar, Microsoft Sentinel, Cortex XDR, XSIAM, and Azure

Collaborate with SOC and Information Security teams

Lead advanced cybersecurity automation processes

Requirements

At least 4 years of experience in SOC, Incident Response, or DFIR roles

At least 2 years of experience in Digital Forensics and Incident Response

At least 1 year of experience developing SOAR Playbooks and automations

Hands-on Python development experience

Hands-on experience with API integrations

Experience working with SIEM, XDR, and SOAR platforms

High level of English proficiency

Israeli citizenship is mandatory