ProArch

QA Automation Engineer

• SOAR Engineering & Automation
• Design, develop, implement, and maintain SOAR playbooks and automation workflows for SOC operations.
• Build scalable security orchestration workflows for:
• Alert triage
• Automated enrichment
• Threat intelligence correlation
• Incident response
• Containment workflows
• Identity-based investigations
• Case management
• Reporting automation
• Reporting automation
• Implement and maintain integrations between SOAR platforms and various security technologies using APIs, webhooks, SDKs, and custom connectors.
• Develop automation logic to improve SOC efficiency, reduce analyst fatigue, and accelerate Mean Time to Respond (MTTR) and Mean Time to Resolve.
• Support SOAR platform lifecycle management including upgrades, change management, testing, governance, RBAC, and operational maintenance.
• Assist with SOAR platform administration, identity & access management, and environment hardening.
• Hands-on experience integrating and automating workflows involving:
• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender XDR
• Microsoft Defender for Identity (MDI)
• Microsoft Defender for Office 365 (MDO)
• Microsoft Defender for Cloud Apps (MDCA)
• Microsoft Purview
• Microsoft Identity Protection / Entra ID
• CrowdStrike Falcon
• Threat Intelligence platforms
• (Must have) SIEM platforms (Microsoft Sentinel & Defender XDR)
• Graph API
• Ticketing platforms (Datto Autotask preferred)
• Email security solutions
• Endpoint detection & response platforms
• Identity and authentication platforms
• Cloud security solutions
• Work collaboratively with SOC Managers, SOC Team Leads, Analysts, and Security Consultants to identify automation opportunities.
• Create operational enhancements to improve detection engineering, investigation workflows, escalation efficiency, and reporting.
• Assist with scaling SOC operations using automation and AI-driven initiatives.
• Support operational maturity improvements within the SOC environment.
• Participate in incident response automation strategy discussions and implementation planning.
• Contribute to SOC transformation initiatives focused on operational scalability and service optimization.
• Contribute to AI-enabled SOC initiatives and intelligent automation projects.
• Assist in implementing AI orchestration and automation use cases within security operations.
• Research and evaluate emerging AI and automation technologies relevant to cybersecurity operations.
• Support initiatives focused on autonomous investigation workflows, enrichment intelligence, and analyst assistance capabilities.
• Coordinate automation initiatives with internal stakeholders and external vendors.
• Work closely with SOAR vendors for implementation support, troubleshooting, optimization, and feature enablement.
• Participate in project planning, implementation tracking, testing, and deployment activities.
• Maintain technical documentation, workflow diagrams, integration references, and operational runbooks.
• Support cross-functional cybersecurity projects and operational improvements

Security Automation Engineer

Security Operations

• **About ProArch:**
• At ProArch, we partner with businesses around the world to turn big ideas into better outcomes through IT services that span cybersecurity, cloud, data, AI, and app development.
• We’re 400+ team members strong across 3 countries (we call ourselves ProArchians)—and here’s what connects us all:
• - A love for solving real business problems
• - A belief in doing what’s right
• **What’s it like to work here?**
• - You’ll keep growing. You’ll work alongside domain experts who love to share what they know.
• - You’ll be supported, heard, and trusted to make an impact.
• - You’ll take on projects that touch industries, communities, and lives.
• - You’ll have the time to focus on what matters most in your life outside of work.
• At ProArch, you’ll be part of teams that design and deliver technology solutions solving real business challenges for our clients. With services spanning AI, Data, Application Development, Cybersecurity, Cloud & Infrastructure, and Industry Solutions, your work may involve building intelligent applications, securing business‑critical systems, or supporting cloud migrations and infrastructure modernization.
• Every role here contributes to shaping outcomes for global clients and driving meaningful impact. You’ll collaborate with experts across data, AI, engineering, cloud, cybersecurity, and infrastructure—solving complex problems with creativity, precision, and purpose. You’ll join a culture rooted in technology, curiosity, and continuous learning. A place where we move fast, trust you to make an impact, encourage innovation, and support your growth.
• **About Position:**
• At ProArch, a leader in IT security consulting with presence in the US, UK, and India, we are looking for a skilled L3 SOC Analyst / Incident Response Analyst to join our Security Operations Center (SOC) team. In this critical role, you will be responsible for advanced incident detection, investigation, and response to complex cybersecurity threats. Leveraging your extensive experience and expertise, you will lead incident response activities, perform deep-dive analysis, and coordinate with cross-functional teams to mitigate risks and strengthen our security posture. If you thrive in a dynamic, fast-paced environment and are passionate about defending organizations against sophisticated cyber threats, this position is ideal for you.Role Summary
• ProArch are seeking a highly skilled and technically strong L3 SOC Analyst / Incident Response Analyst to operate within a Managed Security Services Provider (MSSP) environment, supporting multiple customer environments across diverse industries.
• **This role is heavily focused on:**
• - Incident Response
• - Threat Investigation
• - Detection Engineering
• - DFIR Operations
• - SOC Automation
• - Threat Hunting
• - Security Platform Engineering
• - Response Workflow Optimization
• The ideal candidate combines strong incident response expertise, deep Microsoft security platform knowledge, hands-on detection engineering capability, and SOC automation experience within a fast-paced MSSP environment.
• This is not a traditional alert-monitoring SOC Analyst role. The position requires strong investigative, analytical, and response-oriented cybersecurity capabilities.
• **Key Responsibilities**
• **1. Incident Response & Threat Investigation**
• Lead and support advanced security incident investigations across multiple customer environments
• **Perform:**
• - Threat triage and validation
• - IOC analysis and threat correlation
• - Endpoint and identity investigations
• - Email security investigations
• - Cloud security incident analysis
• - Root cause analysis
• **Investigate and respond to:**
• - Account compromise incidents
• - Business Email Compromise (BEC)
• - Malware and ransomware activity
• - Privilege escalation
• - Lateral movement activity
• - Suspicious cloud and identity-based attacks
• - Advanced phishing and social engineering campaigns
• - Coordinate containment, remediation, and recovery activities with customer and internal teams
• - Support high-severity incident escalation handling and response coordination
• - Provide detailed investigation findings, timelines, impact assessments, and response recommendations
• - Conduct proactive threat hunting and threat validation activities where required
• - Support digital forensics and evidence collection activities when applicable
• **2. Detection Engineering & SIEM Operations**
• Design, develop, and maintain advanced detection rules across:
• - Microsoft Sentinel
• - Microsoft Defender XDR
• Develop and optimize:
• - KQL queries
• - Analytics rules
• - Correlation logic
• - Detection use cases
• **Perform:**
• - Detection tuning
• - False positive reduction
• - Behavioral baselining
• - Threat-based detection improvements
• - Build and maintain reusable detection content and query libraries
• - Support proactive detection engineering initiatives aligned with emerging threats and attacker techniques
• - Leverage threat intelligence and MITRE ATT&CK mapping to improve detection coverage
• **3. SOC Automation & SOAR Engineering**
• Design and implement SOC automation workflows using:
• - Microsoft Sentinel Playbooks
• - Logic Apps
• - SOAR platforms
• - API-driven integrations
• **Build workflows for:**
• - Alert enrichment
• - Incident routing
• - Automated containment actions
• - Threat intelligence enrichment
• - Ticket synchronization
• - Investigation acceleration
• - Develop scalable automation frameworks to improve SOC operational efficiency
• - Support continuous optimization of SOC workflows and automation coverage
• - Create automation standards and reusable workflow templates across customer environments
• **4. Microsoft Security Platform Operations**
• **Provide hands-on operational support, investigation, tuning, administration, and engineering for:**
• - Microsoft Defender for Endpoint (MDE)
• - Microsoft Defender XDR
• - Microsoft Defender for Identity (MDI)
• - Microsoft Defender for Office 365 (MDO)
• - Microsoft Defender for Cloud Apps (MDCA)
• - Microsoft Purview
• - Microsoft Identity Protection / Entra ID
• - Microsoft Sentinel
• **5. AI Security & Modern Threat Operations**
• Support detection and response activities related to:
• - AI-orchestrated attacks
• - Identity-based attacks
• - Cloud-native threats
• - Advanced phishing and social engineering campaigns
• - Leverage AI-assisted SOC operations and automation capabilities where applicable
• - Support modern detection strategies aligned with evolving attacker techniques
• - Evaluate opportunities to integrate AI-driven efficiencies into detection, investigation, and response workflows
• **6. Client & Operational Support**
• - Participate in customer incident discussions and escalation calls when required
• - Support onboarding of new customer environments and security integrations
• - **Maintain:**
• - Investigation playbooks
• - SOPs
• - Workflow documentation
• - Operational runbooks
• - Detection documentation
• **Collaborate closely with:**
• - SOC Operations
• - Security Engineering
• - Vendors
• - Consulting teams
• - Customer stakeholders
• - Support operational improvement initiatives across SOC and DFIR functions

L3 SOC Analyst, Incident Response Analyst

SDET

• Develop and maintain automated test scripts for web, mobile applications using frameworks like Selenium/WDIO and BDD.
• Participate in code reviews and contribute to code improvements.
• Collaborate with developers and other testers to ensure high-quality software.
• Manage and track defects throughout the development lifecycle.
• Experience with API automation tools like Karate/REST Assured is a plus.

Senior Test Automation Engineer

Technical Project Manager

• Build and develop the project team to ensure maximum performance, by providing purpose, direction, and motivation
• Lead projects from requirements definition through deployment, identifying schedules, scopes, budget estimations, and implementation plans, including risk mitigation
• Coordinate internal and external resources to ensure that projects adhere to scope, schedule, and budget
• Analyze project status and, when necessary, revise the scope, schedule, or budget to ensure that project requirements can be met
• Establish and maintain relationships with relevant client stakeholders, providing day-to-day contact on project status and changes
• Establish and maintain processes for managing scope during the project lifecycle, setting quality and performance standards and assessing risks
• Structure and manage integrated, multitrack performance databases for digital, print, social, broadcast, and experiential projects
• Develop and maintain partnerships with third-party resources, including vendors and researchers
• Assign and monitor resources to ensure project efficiency and maximize deliverables
• Report project outcomes and/or risks to the appropriate management channels and escalate issues, as necessary, according to project work plan

QA Engineer

• Conduct thorough manual testing on software applications to identify any bugs or issues
• Collaborate with development teams to understand project requirements and timelines
• Create and execute test plans and test cases to ensure comprehensive test coverage
• Identify, document, and track defects and issues, working closely with the development team to resolve them
• Perform regression testing to ensure the stability of software releases
• Collaborate with cross-functional teams to understand the end-to-end processes and identify areas for improvement
• Continuously update testing procedures and documentation to ensure accuracy and efficiency
• Web Services testing using SoapUI, verify API results using Postman, and have knowledge of Web Service Studio.
• An active participation in all the SCRUM ceremonies.

AI Engineer

• Proarch is seeking a skilled Sr AI Developer with experience in building scalable, end-to-end applications and integrating AI-driven capabilities using OpenAI technologies.
• The ideal candidate will have strong expertise in backend development, cloud platforms (preferably Azure), and modern search/retrieval systems, along with the ability to design and deliver intelligent applications such as chatbots and LLM-powered solutions.
• You will work closely with cross-functional teams in an Agile environment to build high-performance, secure, and scalable enterprise applications.

Senior AI Developer

Data Engineer

• Design, build, and maintain data pipelines and ETL processes in Azure.
• Utilize Azure tools such as Data Lake, Data Factory, and Synapse Analytics to manage and analyze data.
• Good exposure in Fabric and ETL.
• Ensure the quality and integrity of data, troubleshooting and rectifying any data issues.
• Collaborate with analytics teams to support their data needs and enhance data-driven decision-making.
• Optimize data models and storage solutions for performance and cost efficiency.
• Implement data security practices to protect sensitive information.
• Stay current with technology trends and best practices in data engineering and cloud platforms.