Automation Engineer – Cortex XSOAR

Job Summary

We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON .

Key Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows .

• Build and maintain integrations using Python, REST APIs, JSON , and XSOAR automation frameworks.

• Automate incident response, threat enrichment, investigation, and remediation processes.

• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms .

• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.

• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.

• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.

• Implement security automation following best practices for reliability, scalability, logging, and error handling.

• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Required Skills & Qualifications

• 3+ years of hands-on Cortex XSOAR experience .

• Strong experience with Cortex XSOAR playbooks, integrations, and automation .

• Strong Python scripting skills.

• Hands-on experience with REST APIs and JSON .

• Experience developing SIEM, EDR, IAM, and Incident Response workflows.

• Good knowledge of Linux, Git, and security automation best practices .

• Strong troubleshooting, debugging, analytical, and problem-solving skills.

• Excellent communication and collaboration skills.

Preferred Skills

• Experience with Cortex XSIAM / Cortex XDR .

• Experience with Splunk, ServiceNow, or Microsoft Sentinel .

• Experience integrating CrowdStrike or other EDR/security platforms.

• Knowledge of AWS, Azure, or GCP security .

• Experience with SOC automation, SOAR implementation, and security orchestration.

Ideal Candidate

The ideal candidate is a hands-on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python-based automations, integrate security tools through APIs, and work closely with SOC teams to automate real-world security operations and incident-response processes.