Security Automation Engineer
Skills
APIAutomationIncident ResponseInformation SecurityLinuxPalo Alto NetworksPlaybook
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Proven experience with Cortex XSOAR or XSIAM playbooks and integrations
- Strong Python programming skills for automation scripting
- Deep understanding of incident response cycles and SOC workflows
- Experience working with security tool APIs and RESTful services
- Ability to troubleshoot integration scripts and automation flows
- Strong verbal and written communication skills
- Ability to work independently on technical workstreams
Nice to have
- Problem solving
- Communication
- Autonomy
Day to day
- Design and build advanced security automation playbooks that streamline incident response and SOC operations.
- Develop custom Python integrations and REST API connections between Cortex XSIAM and third-party security tools.
- Analyze manual workflows, troubleshoot automation flows, and optimize content packs dashboards and layouts for enterprise customers.