Job title: Cortex XSOAR Developer

Introduction:

As a Cortex XSOAR Developer, you will be responsible for developing and maintaining automation workflows and playbooks within the Cortex XSOAR platform. You will work closely with the SOC and Security Engineering teams to integrate XSOAR with various security tools and optimize existing automations. This role requires a strong background in Python scripting, REST API integration, and experience with SIEM, EDR, and incident response workflows.

Responsibilities:

• Develop and maintain Cortex XSOAR playbooks and automation workflows
• Build integrations using Python, REST APIs, and JSON
• Automate incident response, enrichment, and remediation processes
• Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools
• Troubleshoot and optimize existing automations
• Collaborate with SOC and Security Engineering teams

Requirements:

• 3 years of hands-on Cortex XSOAR experience
• Strong Python scripting and REST API integration skills
• Experience with SIEM, EDR, and Incident Response workflows
• Knowledge of Linux, Git, and automation best practices
• Excellent communication and problem-solving skills

Preferred Skills:

• Experience with Cortex XSIAM/XDR, Splunk, ServiceNow, Microsoft Sentinel, CrowdStrike, or cloud security (AWS/Azure/Google Cloud Platform)