Security Automation Engineer

Job Purpose

You will contribute to the growth of our Security Operations team by developing automation playbooks within SOAR (Security Orchestration, Automation, and Response) and XDR platforms. You translate analyst-driven investigation workflows into automation that accelerates triage, enrichment, containment, and remediation across the SOC.

Key Responsibilities

• Develop, test, and maintain automated playbooks for Palo Alto XSOAR and Cortex XSIAM.
• Collaborate with SOC analysts to automate manual, repetitive workflows (triage, escalation).
• Integrate security tools to support cohesive response workflows using REST APIs, Regex, and JSON.

Required Experience

• 2+ years as a SOC analyst; senior experience preferred.
• Familiarity with alert triage, threat investigation, and escalation decision-making.
• 1-2 years working with SOAR platforms (Palo Alto XSIAM/XSOAR strongly preferred).

Tech Stack & Skills

Proficiency in Python for scripting. Strong understanding of SIEM, EDR/XDR, threat intelligence, endpoint protection, and email security. Experience detecting phishing, identity threats, and network anomalies.