Automation Engineer – Palo Alto Cortex XSOAR

Company: Nexvow Technologies
Location: Atlanta, GA (Onsite)
Experience: 5–8 Years
Contract Duration: 6+ Months
Work Authorization: Must be authorized to work in the United States on a permanent basis without current or future employer sponsorship.
Interview Process: Phone and Video (WebEx)
Relocation: Candidates willing to relocate to Atlanta, GA will be considered.

Position Overview

Nexvow Technologies is seeking an experienced Automation Engineer specializing in Palo Alto Cortex XSOAR to develop, implement, and maintain security orchestration and automation solutions. The ideal candidate will have at least 3 years of hands-on experience with Cortex XSOAR (formerly Demisto), strong Python programming skills, and experience integrating security platforms through REST APIs and JSON.

The candidate will work closely with Security Operations Center (SOC) and Security Engineering teams to automate incident response, threat intelligence enrichment, security investigations, and remediation workflows.

Key Responsibilities

• Design, develop, maintain, and optimize Palo Alto Cortex XSOAR playbooks and automation workflows.

• Develop custom automation scripts and integrations using Python, REST APIs, and JSON.

• Automate security incident response processes, including alert enrichment, investigation, threat intelligence gathering, and remediation.

• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other enterprise security platforms.

• Build and maintain custom integrations, connectors, automation scripts, and reusable playbook components.

• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.

• Collaborate with SOC analysts, incident responders, and Security Engineering teams to identify automation opportunities.

• Implement security automation best practices, workflow documentation, and version control using Git.

• Work with Linux environments and follow established scripting, testing, and deployment practices.

• Support continuous improvement of security orchestration and incident response capabilities.

Required Skills & Qualifications

• 5–8 years of overall experience in cybersecurity, security engineering, or security automation.

• Minimum 3+ years of hands-on experience with Palo Alto Cortex XSOAR (formerly Demisto).

• Strong experience developing and maintaining Cortex XSOAR playbooks and automation workflows.

• Proficiency in Python scripting for security automation and custom integrations.

• Hands-on experience with REST APIs, JSON, and API-based integrations.

• Strong understanding of SIEM, EDR, SOC operations, and incident response workflows.

• Experience automating security incident enrichment, investigation, containment, and remediation.

• Working knowledge of Linux environments and Git/version control.

• Strong troubleshooting, analytical, and problem-solving skills.

Preferred Qualifications

• Experience with Palo Alto Cortex XDR or Cortex XSIAM.

• Experience integrating security platforms such as Splunk, Microsoft Sentinel, CrowdStrike, and ServiceNow.

• Familiarity with IAM solutions, threat intelligence platforms, and endpoint security technologies.

• Experience with cloud security platforms such as AWS, Microsoft Azure, or Google Cloud Platform.

• Knowledge of cybersecurity operations, threat detection, vulnerability management, and incident response processes.

Ideal Candidate Profile

The ideal candidate is a hands-on security automation engineer with strong Cortex XSOAR development experience, capable of building Python-based integrations and automating complex security operations workflows. Candidates with practical experience integrating SIEM, EDR, and ITSM platforms into Cortex XSOAR will be highly preferred.

Interested Candidates

If your experience aligns with this opportunity, please share your updated resume with:

Email:
Please include your current location, work authorization, total experience, Cortex XSOAR experience, and availability in your response.