Security Automation Engineer
Skills
APIAutomationIncident ResponseInformation SecurityLinuxPalo Alto NetworksPlaybook
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Proven experience building playbooks and managing integrations within Cortex XSOAR/XSIAM
- Strong proficiency in Python for automation scripting and security tool development
- Deep understanding of incident response cycles and SOC workflows
- Experience working with security tool APIs and RESTful services
- Ability to document designs and communicate technical recommendations clearly
- Capability to manage technical workstreams independently
Nice to have
- Problem solving
- Strong communication
- Autonomy
- Technical authority
Day to day
- Design and build advanced security automation playbooks that standardize and accelerate incident response workflows
- Develop custom Python integrations to connect Cortex XSIAM with third-party security tools and internal systems
- Analyze manual SOC processes and transform them into scalable automated workflows while troubleshooting integrations and automation flows