Remote Automation Engineer
Skills
Cyber Threat HuntingGCIHIncident ResponseLinuxOperating SystemsPalo Alto Networks CortexPython
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Hands-on experience building automation playbooks and managing integrations within Cortex XSOAR and/or Cortex XSIAM
- Strong Python programming skills for automation scripting and integration development
- Deep understanding of SOC workflows incident response processes and security operations use cases
- Strong experience working with REST APIs integrations and JSON data handling
- Ability to troubleshoot complex issues across automation workflows integrations and orchestration logic
- Strong customer-facing communication skills to explain technical concepts clearly and effectively
- Ability to operate independently and manage technical workstreams with minimal oversight
Nice to have
- Enterprise security experience
- Palo Alto Networks certifications
- Automation strategy advising
- Workshop delivery
- Documentation skills
- Technical enablement
Day to day
- Design, build, and maintain automation playbooks that streamline incident response and security operations in Cortex XSIAM
- Analyze manual SOC and incident response workflows and convert them into scalable automation solutions
- Develop custom Python integrations and use REST APIs and JSON workflows to connect security tools and internal platforms
- Troubleshoot, optimize, and document automation flows, content packs, dashboards, and platform configurations while advising customer teams on best practices
Hiring process
- StopAHack screening and technical interviews
- Customer or partner alignment interviews, as applicable
- Federal background checks and onboarding aligned to contract requirements
- Assignment to active projects