About this opportunity
PB consulting lists this Automation Engineer – Cortex XSOAR opportunity in Decatur, Georgia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Job Summary
We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON .
Key Responsibilities
Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows .
Build and maintain integrations using Python, REST APIs, JSON , and XSOAR automation frameworks.
Automate incident response, threat enrichment, investigation, and remediation processes.
Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms .
Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
Implement security automation following best practices for reliability, scalability, logging, and error handling.
Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.
Required Skills & Qualifications
3+ years of hands-on Cortex XSOAR experience .
Strong experience with Cortex XSOAR playbooks, integrations, and automation .
Strong Python scripting skills.
Hands-on experience with REST APIs and JSON .
Experience developing SIEM, EDR, IAM, and Incident Response workflows.
Good knowledge of Linux, Git, and security automation best practices .
Strong troubleshooting, debugging, analytical, and problem-solving skills.
Excellent communication and collaboration skills.
Preferred Skills
Experience with Cortex XSIAM / Cortex XDR .
Experience with Splunk, ServiceNow, or Microsoft Sentinel .
Experience integrating CrowdStrike or other EDR/security platforms.
Knowledge of AWS, Azure, or GCP security .
Experience with SOC automation, SOAR implementation, and security orchestration.
Ideal Candidate
The ideal candidate is a hands-on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python-based automations, integrate security tools through APIs, and work closely with SOC teams to automate real-world security operations and incident-response processes.
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.