Senior Cyber Intelligence – Operation Engineer

SOCRadar Extended Threat Intelligence

. Audit and fine-tune customer digital footprints for comprehensive threat surface coverage .

Posted 10/27/2026full-timeRemote • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence enablement, customer technical solutions, and automation, with a strong focus on designing and implementing security operations workflows and AI-powered tools. Proficient in monitoring, analyzing, and optimizing digital risk protection strategies tailored to customer needs.

Highest-signal resume keywords

Threat Intelligence EnablementDigital Risk Protection ConfigurationPython ProgrammingSecurity Operations AutomationAI-Powered Tool Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat MonitoringAlert Rules OptimizationDigital Footprint AuditingData Parsing ToolsMachine Learning ModelsAPI WrappersReconnaissance TechniquesCustom Tooling DevelopmentSOAR PlaybooksBash Scripting

Soft Skills

Customer EngagementAdvisory SkillsAnalytical ThinkingProblem SolvingCommunication

Tools & Technologies

PowerShellSIEM SystemsSecurity PlatformsAutomation WorkflowsMonitoring Parameters

Industry Keywords

Threat Surface CoverageContinuous Threat AnalysisIncident InvestigationDigital Risk ProtectionAdaptive Threat Intelligence

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Audit and fine-tune customer digital footprints for comprehensive threat surface coverage
Configure and optimize alert rules, detection logic, and Digital Risk Protection settings
Design custom monitoring parameters based on customer risk profiles and industry requirements
Advise customers on security best practices and platform optimization
Ensure accurate, noise-free monitoring through configuration management
Develop technical onboarding documentation and configuration guides
Aggregate, correlate, and contextualize security alerts across multiple sources
Provide continuous managed threat monitoring and analysis
Conduct deep-dive investigations into complex threats, incidents, and adversary campaigns
Enrich digital footprints through reconnaissance and discovery
Deliver VIP analysis and targeted threat assessments
Generate adaptive threat intelligence reports
Track platform adoption, engagement, feature utilization, satisfaction, and alarm quality metrics
Identify churn risks and drive customer engagement through outreach, recommendations, and value demonstrations
Develop Python, PowerShell, Bash, and other scripts to automate security workflows
Create data parsing, transformation, enrichment tools, integrations, API wrappers, and connectors
Design AI-powered agents, machine learning models, chatbots, virtual analysts, and LLM-based security tools
Architect security operations automation workflows, SOAR playbooks, reporting, notification, escalation, self-healing, and adaptive response systems

Requirements

What you’ll need

Experience/qualifications for threat intelligence enablement, customer technical solutions, automation, custom tooling, and proactive intelligence services are required by the role description
Ability to audit and fine-tune customer digital footprints for comprehensive threat surface coverage
Ability to configure and optimize alert rules, detection logic, and DRP (Digital Risk Protection) settings
Ability to design monitoring parameters tailored to customer risk profiles and industry requirements
Experience providing continuous threat monitoring and analysis
Ability to investigate complex threats, incidents, and adversary campaigns
Experience with reconnaissance and discovery techniques for digital footprint enrichment
Ability to analyze platform adoption, user engagement, feature utilization, customer satisfaction, and alarm quality metrics
Programming/scripting skills in Python, PowerShell, Bash, and other languages
Ability to create data parsing, transformation, and enrichment tools for threat intelligence processing
Ability to build integrations between security platforms, SIEM systems, and third-party tools
Ability to design API wrappers and connectors
Experience designing and implementing AI-powered agents for automated threat analysis and triage
Knowledge of machine learning models for alert prioritization and anomaly detection
Ability to build LLM-based tools for natural language processing of security data and report generation
Experience architecting security operations automation processes
Knowledge of SOAR (Security Orchestration, Automation and Response) playbooks and integrations