Cortex XSOAR Automation Engineer

 

 

Develop and maintain Cortex XSOAR playbooks and automation workflows.
Build integrations using Python, REST APIs, and JSON.
Automate incident response, enrichment, and remediation processes.
Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools.
Troubleshoot and optimize existing automations.
Collaborate with SOC and Security Engineering teams.

Required Skills
3+ years of hands-on Cortex XSOAR experience.
Strong Python scripting and REST API integration skills.
Experience with SIEM, EDR, and Incident Response workflows.
Knowledge of Linux, Git, and automation best practices.
Excellent communication and problem-solving skills.
Preferred: Experience with Cortex XSIAM/XDR, Splunk, ServiceNow, Microsoft Sentinel, CrowdStrike, or cloud security (AWS/Azure/Google Cloud Platform).