I will automate siem alerts and soc workflows with python and soar


About this gig
Automate repetitive SOC and security operations with custom Python workflows designed for real-world environments.
I can help you automate tasks such as:
- SIEM alert enrichment and processing
- SOC workflow automation
- SOAR integrations and playbook logic
- REST API integrations between security tools
- Webhook receivers and event processing
- JSON/log parsing and transformation
- Automated ticket creation and notification workflows
- IOC enrichment and threat intelligence lookups
- FastAPI or Flask-based integration services
You will receive clean, documented Python code with testing and clear deployment instructions.
I can work with platforms and APIs such as Microsoft Sentinel, Cortex XSOAR/XSIAM, CrowdStrike, Jira, ServiceNow, threat intelligence services, SIEM platforms, EDR tools and other REST APIs.
Please contact me before ordering if your workflow involves multiple platforms or complex authentication requirements.
All automation must be performed on systems and environments you are authorized to access.
Get to know Isgar
Cybersecurity and Automation Engineer
- FromPeru
- Member sinceMay 2020
- Avg. response time1 hour
Languages
English
FAQ
What information do you need before starting?
Please provide the security platform or API involved, the workflow you want to automate, sample inputs or logs if available, expected output, authentication method, and any technical constraints.
Can you integrate SIEM, SOAR, EDR or ticketing platforms?
Yes. I can work with REST APIs, webhooks and custom Python integrations for SIEM, SOAR, EDR, ticketing and threat intelligence platforms, depending on the available API and documentation.
Will I receive the source code?
Yes. You will receive the Python source code created for your project, together with setup or deployment instructions relevant to the agreed scope.
Can you automate an existing SOC workflow?
Yes. If you already have a manual workflow, playbook or process, I can analyze the steps and convert suitable parts into an automated Python or API-driven workflow.
Do you work with private or production environments?
Yes, provided you are authorized to access and automate the environment. Please do not send passwords, private keys or sensitive credentials through Fiverr messages.

