Security Automation Engineer

Secur-Serv; United States; Remote; USD 120,000 - 140,000; Full time

Job summary

Secur-Serv is seeking a Security Automation Engineer to design and implement Cortex XSOAR/XSIAM automation playbooks for enterprise customers. This role emphasizes automation, content management, and custom integrations using Python within the Cortex ecosystem.

You will collaborate with client security teams, define automation roadmaps, and perform knowledge transfer to enable customers to scale their automation capabilities. Remote-friendly role with high autonomy.

Qualifications

• Experience building playbooks in Cortex XSOAR/XSIAM.
• Strong Python scripting for security tool integrations.
• Solid understanding of incident response and SOC workflows.

Responsibilities

• End-to-End Automation: Design, build, and maintain complex automation playbooks to standardize and accelerate incident response and security operations.
• Workflow Engineering: Analyze manual SOC processes and transform them into automated, scalable workflows.
• Content Management: Manage and deploy content packs, custom layouts, and automated dashboards tailored to customer use cases.
• Custom Integrations: Develop and maintain custom integrations using Python to connect XSIAM with third-party security tools and internal systems.
• API Utilization: Leverage RESTful APIs and JSON data structures to facilitate seamless communication between security platforms.
• Troubleshooting: Perform health checks and troubleshooting for integration scripts and automation flows.
• Stakeholder Engagement: Collaborate with customer security teams to define automation roadmaps and success metrics.
• Knowledge Transfer: Conduct technical workshops and sessions to enable customers to manage and expand their automation capabilities.

Skills

Cortex XSOAR/XSIAM

Python programming

Security Operations

Job description

Security Automation Engineer

• Location: Remote
• Salary Range: $120k - $140k

The Professional Services Consultant (PSC) - XSIAM Automation is a technical role focused on delivering advanced security orchestration, automation, and response (SOAR) solutions. You will be responsible for designing, implementing, and optimizing automation playbooks and custom integrations within the Cortex XSIAM platform. This role leverages a deep foundation in Cortex XSOAR to drive efficiency and security maturity for enterprise customers.

Key Responsibilities

Automation & Playbook Development

• End-to-End Automation: Design, build, and maintain complex automation playbooks to standardize and accelerate incident response and security operations.
• Workflow Engineering: Analyze manual SOC processes and transform them into automated, scalable workflows.
• Content Management: Manage and deploy content packs, custom layouts, and automated dashboards tailored to customer use cases.

Integration & Development

• Custom Integrations: Develop and maintain custom integrations using Python to connect XSIAM with third-party security tools and internal systems.
• API Utilization: Leverage RESTful APIs and JSON data structures to facilitate seamless communication between security platforms.
• Troubleshooting: Perform health checks and troubleshooting for integration scripts and automation flows.

Technical Consulting & Strategy

• Subject Matter Expertise: Act as a technical authority on XSIAM and XSOAR automation best practices.
• Stakeholder Engagement: Collaborate with customer security teams to define automation roadmaps and success metrics.
• Knowledge Transfer: Conduct technical workshops and sessions to enable customers to manage and expand their automation capabilities.

Technical Skills & Qualifications

Required Skills

• Cortex XSOAR/XSIAM: Proven experience in building playbooks and managing integrations within the Cortex ecosystem.
• Python Programming: Strong proficiency in Python for security tool development and automation scripting.
• Security Operations: Deep understanding of incident response cycles and SOC workflows.

Preferred Experience

• API Development: Extensive experience working with security tool APIs.
• Certifications: Palo Alto Networks certifications (e.g., PCNSE, PCDRA, or specialized XSOAR/XSIAM credentials).

Professional Attributes

• Problem Solving: Ability to navigate and resolve complex technical challenges.
• Communication: Strong verbal and written skills for documenting designs and advising customers.
• Autonomy: Proactive and capable of managing technical workstreams independently