Description

You will build and maintain security automation workflows across the platform.

Responsibilities

• Design and implement complex, multi-stage automation playbooks in Cortex XSIAM/XSOAR using custom Python scripting.
• Convert manual triage and response processes into fully automated workflows and drive toward 80% automation coverage.
• Develop custom integrations between XSIAM and third-party tools, including EDR, firewalls, and cloud environments.
• Manage and optimize the Cortex XSIAM environment, including data ingestion strategy and XQL query development.
• Embed MITRE ATT&CK-aligned logic into workflows to strengthen detection and response maturity.

Required Skills

• 5+ years of experience in security automation engineering.
• Expert-level experience with Cortex XSIAM/XSOAR, building production-grade playbooks.
• Advanced proficiency in Python.
• Strong command of XQL for data correlation and threat hunting.
• Proven experience with REST APIs, JSON, and XML payloads.
• Experience scripting in PowerShell.
• Familiarity with AWS and Azure environments.
• Understanding of IAM platforms and incident response workflows.

Key Skills

Education

Any Gradute