Cyber Security Analyst

Job Summary

We are looking for a skilled Cybersecurity Analyst with strong experience in Security Operations Center (SOC) Automation, Security Orchestration, Automation and Response (SOAR) platforms, and playbook development. The ideal candidate should have hands-on expertise in Palo Alto Cortex XSOAR, incident response automation, security integrations, and workflow optimization to improve SOC efficiency and reduce response times.

The candidate will be responsible for designing, developing, and maintaining automated security workflows, integrating security tools, and supporting SOC operations through orchestration and automation initiatives.

Key Responsibilities

• Design, develop, and maintain automated security playbooks using Palo Alto Cortex XSOAR.
• Build and manage integrations between security tools such as SIEM, EDR, IAM, Firewalls, Threat Intelligence Platforms, and ticketing systems.
• Automate incident response processes to improve SOC effectiveness and reduce manual efforts.
• Collaborate with SOC Analysts, Incident Responders, and Security Engineers to identify automation opportunities.
• Develop custom scripts and integrations using Python and REST APIs.
• Troubleshoot and optimize existing automation workflows and playbooks.
• Implement enrichment, containment, remediation, and notification workflows.
• Analyze security incidents and recommend automation improvements.
• Maintain documentation for playbooks, workflows, integrations, and operational procedures.
• Support continuous improvement of SOC processes, KPIs, and security operations maturity.
• Participate in security monitoring, threat hunting, and incident response activities when required.

Required Skills

SOAR & Automation

• Palo Alto Cortex XSOAR Administration and Development
• Security Orchestration, Automation and Response (SOAR)
• Playbook Design and Development
• Workflow Automation
• Incident Response Automation
• Security Operations Center (SOC) Processes

Security Technologies

• SIEM Platforms (Splunk, QRadar, Sentinel, ArcSight, etc.)
• Endpoint Detection & Response (CrowdStrike, Defender, Cortex XDR)
• Threat Intelligence Integration
• Identity & Access Management (IAM)
• Firewalls and Network Security Tools