Automation Engineer – Cortex XSOAR

Veriipro; Atlanta (GA); On-site; USD 120,000 - 150,000; Full time

Job summary

Veriipro is seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions. The role focuses on building XSOAR playbooks and integrations to streamline incident response using Python, REST APIs, and JSON.

You will collaborate with SOC teams to automate real-world security operations, improve reliability, and scale automation across security platforms. Strong Cortex XSOAR experience and scripting skills are essential.

Qualifications

• 3+ years hands-on Cortex XSOAR experience.
• Strong Cortex XSOAR playbooks, integrations, and automation.
• Strong Python scripting skills.
• Hands-on REST APIs and JSON.
• Experience developing SIEM, EDR, IAM, and Incident Response workflows.
• Good knowledge of Linux, Git, and security automation best practices.
• Strong troubleshooting, debugging, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.

Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows.
• Build and maintain integrations using Python, REST APIs, JSON, and XSOAR automation frameworks.
• Automate incident response, threat enrichment, investigation, and remediation.
• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms.
• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.
• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.
• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.
• Implement security automation following best practices for reliability, scalability, logging, and error handling.
• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Skills

Cortex XSOAR

Playbooks

Python

REST APIs

JSON

SIEM

EDR

IAM

Incident Response

Linux

Git

Best Practices

Troubleshooting

Communication

Job description

Job Summary

We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR. The ideal candidate will have strong hands‑on experience developing XSOAR playbooks, automations, integrations, and incident-response workflows using Python, REST APIs, and JSON.

Key Responsibilities

• Develop, maintain, and optimize Cortex XSOAR playbooks and automation workflows.

• Build and maintain integrations using Python, REST APIs, JSON, and XSOAR automation frameworks.

• Automate incident response, threat enrichment, investigation, and remediation processes.

• Integrate Cortex XSOAR with SIEM, EDR, IAM, ITSM, and other security platforms.

• Troubleshoot, debug, and optimize existing playbooks, integrations, and automation workflows.

• Develop reusable automation components to improve SOC efficiency and reduce manual intervention.

• Collaborate with SOC, Security Operations, and Security Engineering teams to identify automation opportunities.

• Implement security automation following best practices for reliability, scalability, logging, and error handling.

• Support testing, deployment, documentation, and continuous improvement of XSOAR solutions.

Required Skills & Qualifications

• 3+ years of hands‑on Cortex XSOAR experience.

• Strong experience with Cortex XSOAR playbooks, integrations, and automation.

• Strong Python scripting skills.

• Hands‑on experience with REST APIs and JSON.

• Experience developing SIEM, EDR, IAM, and Incident Response workflows.

• Good knowledge of Linux, Git, and security automation best practices.

• Strong troubleshooting, debugging, analytical, and problem‑solving skills.

• Excellent communication and collaboration skills.

Preferred Skills

• Experience with Cortex XSIAM / Cortex XDR.

• Experience with Splunk, ServiceNow, or Microsoft Sentinel.

• Experience integrating CrowdStrike or other EDR/security platforms.

• Knowledge of AWS, Azure, or GCP security.

• Experience with SOC automation, SOAR implementation, and security orchestration.

Ideal Candidate

The ideal candidate is a hands‑on Cortex XSOAR Automation Engineer who can independently develop playbooks, create Python‑based automations, integrate security tools through APIs, and work closely with SOC teams to automate real‑world security operations and incident‑response processes.