Job Summary We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON . Key Responsibilities
- Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows .
- Build and maintain integrations using Python, REST APIs, JSON , and XSOAR automation frameworks.
- Automate incident response, threat enrichment, investigation, and remediation processes.
- Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms .
- Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
- Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
- Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
- Implement security automation following best practices for reliability, scalability, logging, and error handling.
- Support testing, deployment, documentation, and continuous improvement of XSOAR solutions. Required Skills & Qualifications
- 3+ years of hands-on Cortex XSOAR experience .
- Strong experience with Cortex XSOAR playbooks, integrations, and automation .
- Strong Python scripting skills.
- Hands-on experience with REST APIs and JSON .
- Experience developing SIEM, EDR, IAM, and Incident Response workflows.
- Good knowledge of Linux, Git, and security automation best practices .
- Strong troubleshooting, debugging, analytical, and problem-solving skills.
- Excellent communication and collaboration skills. Preferred Skills
- Experience with Cortex XSIAM / Cortex XDR .
- Experience with Splunk, ServiceNow, or Microsoft Sentinel .
- Experience integrating CrowdStrike or other EDR/security platforms.
- Knowledge of AWS, Azure, or GCP security .
- Experience with SOC automation, SOAR implementation, and security orchestration. Ideal Candidate The ideal candidate is a hands-on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python-based automations, integrate security tools through APIs, and work closely with SOC teams to automate real-world security operations and incident-response processes. Full posting: https://bebee.com/us/jobs/automation-engineer-pb-consulting-sandy-springs--lifeworq-27c57468-a2d4-4a53-bb96-aba20a124e17
