Description

You will customize the Palo Alto XSOAR platform and integrate Security Operation Center (SOC) systems using well-defined APIs.

You will onboard new data sources into Splunk or other SIEM tools, perform maintenance, and automate manual SOC tasks. You will also deploy and evaluate external proof-of-concept tools.

Responsibilities

• Customize Palo Alto XSOAR platform and integrate SOC systems via APIs.
• Onboard data sources to Splunk/SIEM and perform periodic maintenance.
• Automate manual SOC tasks using Python.
• Deploy and evaluate external proof-of-concept security tools.
• Collaborate with stakeholders to define integration requirements.

Required Skills

• Minimum 5 years of development experience with Python and web frameworks (Django, Flask).
• Minimum 2 years of experience customizing SOAR tools, preferably Palo Alto XSOAR.
• Strong experience with log management and SIEM technologies such as Splunk.
• Ability to write and maintain well-defined APIs for system integration.
• US Citizenship is required.

Preferred Skills

• Experience with other SIEM platforms beyond Splunk.

Key Skills

Education

Bachelor's degree