Cortex XSOAR Automation Architect

Signature IT World Inc; Georgia; On-site; USD 110,000 - 160,000; Full time

Job summary

Signature IT World Inc in United States (Georgia) seeks a Cortex XSOAR Engineer to develop and maintain playbooks and automation workflows. You will build integrations using Python, REST APIs, and JSON to automate incident response, enrichment, and remediation.

You will integrate XSOAR with SIEM, EDR, IAM, ITSM, and other security tools, troubleshoot, and optimize existing automations while collaborating with SOC and Security Engineering teams.

Qualifications

• 3+ years of hands-on Cortex XSOAR experience.
• Strong Python scripting and REST API integration skills.
• Experience with SIEM, EDR, and Incident Response workflows.
• Knowledge of Linux, Git, and automation best practices.
• Excellent communication and problem-solving skills.
• Preferred: Cortex XSIAM/XDR, Splunk, ServiceNow, Microsoft Sentinel, CrowdStrike, or cloud security (AWS/Azure/GCP).

Responsibilities

• Develop and maintain Cortex XSOAR playbooks and automation workflows.
• Build integrations using Python, REST APIs, and JSON.
• Automate incident response, enrichment, and remediation processes.
• Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools.
• Troubleshoot and optimize existing automations.
• Collaborate with SOC and Security Engineering teams.

Skills

Cortex XSOAR experience

Python scripting

REST API integration

Linux knowledge

Git

Automation best practices

Communication skills

Problem-solving skills

Collaboration with SOC

Tools

Cortex XSOAR

Python

JSON

SIEM

EDR

IAM

ITSM

Splunk

ServiceNow

Microsoft Sentinel

CrowdStrike

AWS

Azure

GCP

Job description

Signature IT World Inc in United States (Georgia) seeks a Cortex XSOAR Engineer to develop and maintain playbooks and automation workflows. You will build integrations using Python, REST APIs, and JSON to automate incident response, enrichment, and remediation.

You will integrate XSOAR with SIEM, EDR, IAM, ITSM, and other security tools, troubleshoot, and optimize existing automations while collaborating with SOC and Security Engineering teams.