XSOAR Engineer - Consultant / Assistant Manager

XSOAR Engineer Consultant / Assistant Manager

Experience: 110 years
Locations: Mumbai / Hyderabad

Role Overview

We are looking for skilled XSOAR Engineers with experience in security automation, SOAR playbook development, and incident response automation. The ideal candidates will have hands-on experience with Palo Alto Cortex XSOAR/XSIAM or other SOAR platforms, along with scripting and security tool integration capabilities.

Key Responsibilities

• Develop, maintain, and optimize automated playbooks within SOAR platforms to streamline security operations and incident response.
• Automate incident detection, triage, investigation, escalation, and remediation workflows.
• Integrate SOAR playbooks with SIEMs, firewalls, endpoint protection tools, threat intelligence platforms, and ticketing systems.
• Develop and maintain automation scripts using Python, JavaScript, PowerShell, or similar scripting languages.
• Configure and optimize SOAR platforms, troubleshoot playbook failures, perform root cause analysis, and improve automation performance.
• Collaborate with SOC analysts, security engineers, and incident response teams to identify automation opportunities and implement security use cases.
• Integrate threat intelligence feeds and automate indicators of compromise (IOC) enrichment.
• Test and validate playbooks, troubleshoot integration issues, and ensure reliable execution.
• Document playbook workflows, integrations, standard operating procedures, and automation processes.
• Support SIEM content management activities, including security monitoring use cases, detection content, and threat detection optimization, where applicable.

Required Skills

• Hands-on experience with SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
• Strong experience in SOAR playbook development and security process automation.
• Knowledge of incident response, threat intelligence, network security, and vulnerability management.
• Experience integrating security tools through APIs and platform connectors.
• Scripting knowledge in Python, JavaScript, PowerShell, or similar languages.
• Ability to troubleshoot automation workflows and perform root cause analysis.
• Understanding of SOC operations, security incident handling, and threat detection.
• Strong problem-solving, documentation, and collaboration skills.

Education

Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related field.