Browse categories
Explore
Fiverr Pro
English
$
USD
I will integrate wazuh with shuffle or n8n for custom soar automation
Wazuh, Elastic SIEM and SOAR Automation Engineer
I'm a DevOps and Security Operations Engineer working daily with Wazuh, QRadar, Defender XDR, and Shuffle SOAR in a live SOC. I deploy and tune Wazuh SIEM end-to-end, write custom decoders and detecti...
About this Gig
I will connect Wazuh alerts to Shuffle or n8n and turn manual SOC steps into a tested, traceable incident-response workflow.
I build production security automation with Wazuh, QRadar, Defender XDR, Shuffle, DFIR-IRIS, ITSM platforms, Python, and REST APIs. The workflow can receive an alert, enrich IOCs, collect event context, create a case or ticket, notify the correct team, and trigger an approved response action.
Depending on scope, you can receive:
- Wazuh webhook and alert ingestion
- IOC enrichment for IPs, domains, URLs, and hashes
- DFIR-IRIS, TheHive, Jira, ServiceNow, Slack, Teams, or email integration
- Deduplication, routing, retries, and failure notifications
- Custom API or Python steps when a native app is unavailable
- End-to-end testing and handoff documentation
This service does not include 24/7 SOC monitoring or third-party license costs. Message me with your alert source, destination tools, and desired response before ordering.
Tools:
Docker
•
Jenkins
•
GitHub
•
Kubernetes
Frameworks:
Terraform
•
Ansible
Programming language:
Bash
•
Python
•
PowerShell
Expertise:
Debugging
•
Development
•
Configuration
My Portfolio
FAQ
Do I need a Shuffle account already?
A free or self-hosted Shuffle instance works. If you don't have one yet, I can help you get it running as part of the project.
What tools can this integrate with?
Anything with an API or webhook — Wazuh, QRadar, Defender XDR, DFIR-IRIS, TheHive, Slack, Jira, ServiceNow, and most SIEM/ITSM platforms. Tell me your stack and I'll confirm feasibility before you order.
Do you write custom scripts if the built-in Shuffle apps don't cover something?
Yes — Python enrichment scripts are included at Standard/Premium tiers for anything the standard app blocks can't handle.
Can this replace our current manual playbook?
That's the goal — send me your current manual process and I'll map it into an automated workflow that mirrors (and speeds up) exactly what your analysts do today.
