Automation Engineer

Job Summary We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON .

Key Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows .
• Build and maintain integrations using Python, REST APIs, JSON , and XSOAR automation frameworks.
• Automate incident response, threat enrichment, investigation, and remediation processes.
• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms .
• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
• Implement security automation following best practices for reliability, scalability, logging, and error handling.
• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Required Skills & Qualifications

• 3+ years of hands-on Cortex XSOAR experience .
• Strong experience with Cortex XSOAR playbooks, integrations, and automation .
• Strong Python scripting skills.
• Hands-on experience with REST APIs and JSON .
• Experience developing SIEM, EDR, IAM, and Incident Response workflows.
• Good knowledge of Linux, Git, and security automation best practices .
• Strong troubleshooting, debugging, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Preferred Skills

• Experience with Cortex XSIAM / Cortex XDR .
• Experience with Splunk, ServiceNow, or Microsoft Sentinel .
• Experience integrating CrowdStrike or other EDR/security platforms.
• Knowledge of AWS, Azure, or GCP security .
• Experience with SOC automation, SOAR implementation, and security orchestration.

Ideal Candidate The ideal candidate is a hands-on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python-based automations, integrate security tools through APIs, and work closely with SOC teams to automate real-world security operations and incident-response processes.