Role Overview :

We are looking for skilled XSOAR Engineers with experience in security automation, SOAR playbook development, and incident response automation. The ideal candidates will have hands-on experience with Palo Alto Cortex XSOAR/XSIAM or other SOAR platforms, along with scripting and security tool integration capabilities.

Key Responsibilities :

- Develop, maintain, and optimize automated playbooks within SOAR platforms to streamline security operations and incident response.

- Automate incident detection, triage, investigation, escalation, and remediation workflows.

- Integrate SOAR playbooks with SIEMs, firewalls, endpoint protection tools, threat intelligence platforms, and ticketing systems.

- Develop and maintain automation scripts using Python, JavaScript, PowerShell, or similar scripting languages.

- Configure and optimize SOAR platforms, troubleshoot playbook failures, perform root cause analysis, and improve automation performance.

- Collaborate with SOC analysts, security engineers, and incident response teams to identify automation opportunities and implement security use cases.

- Integrate threat intelligence feeds and automate indicators of compromise (IOC) enrichment.

- Test and validate playbooks, troubleshoot integration issues, and ensure reliable execution.

- Document playbook workflows, integrations, standard operating procedures, and automation processes.

- Support SIEM content management activities, including security monitoring use cases, detection content, and threat detection optimization, where applicable.

Required Skills :

- Hands-on experience with SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.

- Strong experience in SOAR playbook development and security process automation.

- Knowledge of incident response, threat intelligence, network security, and vulnerability management.

- Experience integrating security tools through APIs and platform connectors.

- Scripting knowledge in Python, JavaScript, PowerShell, or similar languages.

- Ability to troubleshoot automation workflows and perform root cause analysis.

- Understanding of SOC operations, security incident handling, and threat detection.

- Strong problem-solving, documentation, and collaboration skills.

Education :

- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related field.