Security Orchestration Automation and Response (SOAR) Automation Consultant

ServiceNow Development

• Design, develop, and configure ServiceNow applications and modules such as:
  • ITSM (Incident, Problem, Change, Request)
  • CMDB and Service Mapping
  • Flow Designer and Workflow Editor
• Develop custom scripts using JavaScript, Glide API, UI Actions, Business Rules, and Client Scripts
• Build and maintain REST/SOAP integrations with third-party tools
• Create and manage ServiceNow scoped applications
• Perform platform upgrades, patching, and performance tuning
• Ensure adherence to ServiceNow best practices and coding standards

SOAR Automation

• Design, build, and maintain SOAR playbooks for automated incident response
• Integrate SOAR with SIEM, EDR, firewalls, ticketing systems, and threat intelligence platforms
• Automate security use cases such as:
  • Phishing response
  • Malware containment
  • Account compromise
  • Alert triage and enrichment
• Collaborate with SOC teams to optimize response workflows
• Monitor playbook performance and continuously improve automation logic

Collaboration & Governance

• Work closely with IT operations, cybersecurity, and compliance teams
• Produce technical documentation, SOPs, and runbooks
• Participate in code reviews, testing, and release management
• Support audits, security assessments, and compliance initiatives

Technical Skills

• Strong hands-on experience with ServiceNow development
• Experience with SOAR platforms such as:
  • ServiceNow Security Operations (SecOps)
  • Palo Alto Cortex XSOAR
  • Splunk SOAR
  • IBM Resilient (any one or more)
• Proficient in JavaScript, REST APIs, JSON, and web services
• Experience integrating with security tools (SIEM, EDR, IAM, email gateways)
• Knowledge of ITIL processes and security incident lifecycle

Soft Skills

• Strong analytical and problem-solving skills
• Ability to translate business and security requirements into automation
• Good communication and stakeholder management skills
• Ability to work independently and in cross-functional teams