Automation Engineer

PB consulting; Sandy Springs (GA); On-site; USD 110,000 - 140,000; Full time

Job summary

PB consulting is seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions. The role focuses on building playbooks, automations, and integrations using Python, REST APIs, and JSON to accelerate incident response and security operations.

The ideal candidate will work closely with SOC and Security Engineering teams to implement scalable, reliable XSOAR workflows, improve logging and error handling, and support

Qualifications

• 3+ years hands-on Cortex XSOAR experience.
• Strong experience with Cortex XSOAR playbooks, integrations, and automation.
• Strong Python scripting skills.
• Hands-on experience with REST APIs and JSON.
• Experience developing SIEM, EDR, IAM, and Incident Response workflows.
• Good knowledge of Linux, Git, and security automation best practices.
• Strong troubleshooting, debugging, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows.
• Build and maintain integrations using Python, REST APIs, JSON, and XSOAR automation frameworks.
• Automate incident response, threat enrichment, investigation, and remediation processes.
• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms.
• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
• Implement security automation following best practices for reliability, scalability, logging, and error handling.
• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Skills

Cortex XSOAR

Python scripting

REST APIs

JSON

Linux

Git

Troubleshooting

Communication

Tools

Git

Linux

Job description

Job Summary We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON .

Key Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows .
• Build and maintain integrations using Python, REST APIs, JSON , and XSOAR automation frameworks.
• Automate incident response, threat enrichment, investigation, and remediation processes.
• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms .
• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
• Implement security automation following best practices for reliability, scalability, logging, and error handling.
• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Required Skills & Qualifications

• 3+ years of hands-on Cortex XSOAR experience .
• Strong experience with Cortex XSOAR playbooks, integrations, and automation .
• Strong Python scripting skills.
• Hands-on experience with REST APIs and JSON .
• Experience developing SIEM, EDR, IAM, and Incident Response workflows.
• Good knowledge of Linux, Git, and security automation best practices .
• Strong troubleshooting, debugging, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Preferred Skills

• Experience with Cortex XSIAM / Cortex XDR .
• Experience with Splunk, ServiceNow, or Microsoft Sentinel .
• Experience integrating CrowdStrike or other EDR/security platforms.
• Knowledge of AWS, Azure, or GCP security .
• Experience with SOC automation, SOAR implementation, and security orchestration.

Ideal Candidate The ideal candidate is a hands-on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python-based automations, integrate security tools through APIs, and work closely with SOC teams to automate real-world security operations and incident-response processes.