Palo Alto XSOAR/Cortex XSOAR Automation Engineer
Location: Charlotte, NC / Dallas, TX (Hybrid)
Key Responsibilities:
- Design and implement automation playbooks in Palo Alto Cortex XSOAR to streamline security operations workflows.
- Develop custom integrations and scripts to connect XSOAR with various security tools and platforms.
- Collaborate with SOC teams, incident responders, and threat analysts to understand requirements and deliver automation solutions.
- Maintain and optimize existing playbooks and integrations for performance and scalability.
- Troubleshoot and resolve issues related to automation workflows and platform functionality.
- Document playbooks, configurations, and operational procedures.
- Provide support during critical incidents and participate in on-call rotations as needed.
Required Skills & Qualifications:
- 3–5 years of hands-on experience with Palo Alto Cortex XSOAR (Demisto).
- Strong understanding of SOAR concepts, incident response, and security operations.
- Proficiency in Python scripting for playbook development and integration customization.
- Experience with REST APIs, JSON, and integration of third-party security tools.
- Familiarity with SIEM platforms (e.g., Splunk, QRadar, ArcSight) and threat intelligence feeds.
- Excellent problem-solving and communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
Preferred Qualifications:
- Palo Alto certifications (e.g., PCSAE) are a plus.
- Experience with other automation platforms or scripting tools.
- Exposure to cloud security and DevSecOps practices.