indeed
FortiSOAR L2 Engineer / Senior SOAR Automation Engineer (Fortinet FortiSOAR)
DicoTech Corvit Technologies Consulting and Trading and Services
Doha, QAT
Senior
Onsite
1 weeks ago
FortiSOARREST APIsJSONAutomationPlaybook DevelopmentSOC Operations
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
FortiSOARREST APIsJSON
About the Role
DicoTech Corvit Technologies is seeking a FortiSOAR L2 Engineer to own advanced support, engineering, and automation delivery for FortiSOAR. The role designs playbooks, connectors, and workflows to improve SOC efficiency, and leads P1/P2 troubleshooting and upgrades.
Key Skills for This Role
FortiSOARREST APIsJSONAutomationPlaybook DevelopmentSOC Operations
Responsibilities
- Own platform stability: application services, background workers, queues, performance, backups, and upgrades
- Troubleshoot complex issues: connector failures, execution errors, queue delays, timeouts, API rate limits, auth/token issues, and data mapping problems
- Manage platform lifecycle: patching, release management, DR/backup procedures, and change implementation
- Design, build, test, deploy, and maintain playbooks/workflows for common SOC use cases
- Integrate FortiSOAR with SIEM/EDR/email/proxy/firewalls/IAM/ticketing tools using REST APIs and native connectors
- Align automations to SOC processes (ITIL/IR lifecycle), maintain documentation, and support service reviews
Requirements
- 4–8+ years in security automation / SOAR operations with strong hands on FortiSOAR (L2/L3)
- Strong knowledge of REST APIs, JSON, authentication, integrations, and troubleshooting
- Automation mindset and ability to convert SOPs into reliable workflows with robust error handling
Full Job Posting
Role Summary
- The FortiSOAR L2 Engineer owns advanced support, engineering, and automation delivery for FortiSOAR.
- The role designs and maintains playbooks, connectors/integrations, incident case management workflows, and automations that improve SOC efficiency and consistency.
- This role also leads P1/P2 troubleshooting, upgrades, and performance improvements.
Key Responsibilities
- Own platform stability: application services, background workers, queues, performance, backups, and upgrades.
- Troubleshoot complex issues: connector failures, execution errors, queue delays, timeouts, API rate limits, auth/token issues, and data mapping problems.
- Manage platform lifecycle: patching, release management, DR/backup procedures, and change implementation.
- Design, build, test, deploy, and maintain playbooks/workflows for common SOC use cases: phishing response, IOC enrichment, triage automation, containment actions, ticket orchestration, alert deduplication.
- Create reusable components: templates, sub playbooks, decision blocks, error handling, and retry logic.
- Implement approval gates, human in the loop steps, and audit trails aligned to governance.
- Integrate FortiSOAR with SIEM/EDR/email/proxy/firewalls/IAM/ticketing tools using REST APIs and native connectors.
- Configure and troubleshoot auth methods (OAuth2, API keys, certificates, SAML/SSO as applicable).
- Perform data transformation/mapping for consistent case fields and reporting.
- Align automations to SOC processes (ITIL/IR lifecycle), maintain documentation, and support service reviews.
- Define KPIs: automation success rate, time saved, reduced manual steps, MTTR improvements.
- Mentor L1/L2 engineers to operationalize runbooks and reduce escalations.
Required Skills & Experience
- 4–8+ years in security automation / SOAR operations, with strong hands on FortiSOAR (L2/L3).
- Strong knowledge of REST APIs, JSON, authentication, integrations, and troubleshooting.
- Automation mindset and ability to convert SOPs into reliable workflows with robust error handling.
Good to Have
- Scripting: Python, JavaScript (automation logic), regex
- Understanding of SOC operations, incident response workflows, and detection to response lifecycle
- Familiarity with ServiceNow, Jira, Microsoft 365 security stack, EDR/XDR tools
Pay
- QAR13,000.00 QAR15,000.00 per month
Work Location
- In person
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career