Cortex XSOAR Automation Engineer

Palo Alto XSOAR/Cortex XSOAR Automation Engineer

Location: Charlotte, NC / Dallas, TX (Hybrid)

Key Responsibilities:

• Design and implement automation playbooks in Palo Alto Cortex XSOAR to streamline security operations workflows.
• Develop custom integrations and scripts to connect XSOAR with various security tools and platforms.
• Collaborate with SOC teams, incident responders, and threat analysts to understand requirements and deliver automation solutions.
• Maintain and optimize existing playbooks and integrations for performance and scalability.
• Troubleshoot and resolve issues related to automation workflows and platform functionality.
• Document playbooks, configurations, and operational procedures.
• Provide support during critical incidents and participate in on-call rotations as needed.

Required Skills & Qualifications:

• 3–5 years of hands-on experience with Palo Alto Cortex XSOAR (Demisto).
• Strong understanding of SOAR concepts, incident response, and security operations.
• Proficiency in Python scripting for playbook development and integration customization.
• Experience with REST APIs, JSON, and integration of third-party security tools.
• Familiarity with SIEM platforms (e.g., Splunk, QRadar, ArcSight) and threat intelligence feeds.
• Excellent problem-solving and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications:

• Palo Alto certifications (e.g., PCSAE) are a plus.
• Experience with other automation platforms or scripting tools.
• Exposure to cloud security and DevSecOps practices.