Browse categories
Explore
Fiverr Pro
English
$
USD
I will configure wazuh active response and shuffle soar automation
Cyber Security Analyst, Wazuh SIEM Specialist
3+ years of experience as a Cyber Security Engineer & active Bank SOC/CERT Analyst. I deploy, tune, and scale open-source SIEM architectures - specifically Wazuh - to build production-grade defense pi...
About this Gig
Is your Wazuh SIEM detecting threats but still requiring manual response?
I will configure Wazuh Active Response and Shuffle SOAR automation to help automate security investigation, enrichment, alerting, and response workflows.
I specialize in Wazuh, SOC operations, security automation, Active Response, threat intelligence, and SOAR workflows.
What I can build:
- Wazuh Active Response
- Shuffle SOAR workflows
- Automated IP blocking
- Brute-force response
- Malicious IP enrichment
- VirusTotal integration
- AbuseIPDB integration
- Automated email/notification alerts
- Alert enrichment and investigation workflows
- Firewall response automation
- Custom response scripts
- Wazuh Shuffle integrations
- Automated incident-response workflows
- Testing, tuning, and documentation
Example workflow
Wazuh Alert - Shuffle SOAR - Threat Intelligence - Decision - Automated Response -Notification
I will design the workflow according to your environment and test it before delivery.
Best for
- Existing Wazuh deployments
- SOC teams
- Security engineers
- Small businesses
- MSSPs
- Security labs and homelabs
Already have Wazuh installed? Send me your automation requirements before ordering, and I will recommend the right package.
Cloud provider:
Other
Expertise:
Migration
•
Development
•
Configuration
•
Performance
•
Other
Cloud computing resource:
VPC
•
Azure Functions
•
Other
My Portfolio
FAQ
Do I need Wazuh already installed?
Yes. This gig is primarily for existing Wazuh environments. For deployment, please use my Wazuh deployment gig.
What is Wazuh Active Response?
It allows Wazuh to automatically perform configured actions when specific security events are detected.
Do you work with Shuffle SOAR?
Yes. I can build Shuffle workflows to automate alert enrichment, investigation, notification and response.
Can you integrate VirusTotal and AbuseIPDB?
Yes. I can integrate threat-intelligence services into suitable Wazuh and Shuffle workflows.
Can you automatically block malicious IP addresses?
Yes. Depending on your environment, I can configure automated IP blocking through Wazuh Active Response, a firewall or other supported mechanisms.
Can you create custom SOAR workflows?
Yes. I can design and configure workflows based on your specific security use case.
Will you test the automation?
Yes. I will test the workflow and response action before delivery.
Can you automate Slack or email notifications?
Yes. Notifications can be integrated into appropriate Wazuh or Shuffle workflows.
