SOAR Consultant – FortiSOAR Implementation

About the role

The SOAR Consultant works directly with customers to design, deploy, and customize FortiSOAR for their SOC or NOC environments. You will translate security operations use‑cases into automated workflows, integrate with a wide range of security tools, and help organisations accelerate and scale their incident‑response capabilities.

Key responsibilities

• Lead end‑to‑end implementation of FortiSOAR for enterprise and MSSP customers, including multi‑tenant deployments.
• Design, configure, and optimise playbooks, connectors, dashboards, and case‑management solutions.
• Conduct workshops with SOC teams to capture requirements and map them into FortiSOAR workflows.
• Develop automated playbooks aligned with MITRE ATT&CK, NIST, and Cyber Kill Chain frameworks.
• Implement and validate integrations with SIEMs, EDR, firewalls, vulnerability management, TIPs, and ITSM tools.
• Provide knowledge transfer, training, and documentation for long‑term adoption.

Required profile

• Proven experience in security automation or consulting, preferably with FortiSOAR or similar platforms.
• Strong understanding of SOC operations, incident‑response processes, and security tooling.
• Excellent consulting, communication, and client‑facing skills.
• Ability to translate business requirements into technical designs and troubleshoot complex integrations.

Required skills

• FortiSOAR (or Palo Alto XSOAR, Splunk SOAR)
• Security Automation platforms
• SOC Operations & Incident Response
• SIEM tools (QRadar, Splunk, Sentinel, ArcSight)
• Python scripting
• REST API integration
• Firewalls, endpoint security, threat detection technologies
• Design of security integrations and automation workflows