Security Automation Engineer I: SOAR/XSOAR Specialist

CBTS; Tennessee; On-site; USD 90,000 - 130,000; Full time

Job summary

CBTS is seeking a Security Automation Engineer I to contribute to the growth of the Security Operations team by developing automation playbooks and workflows within our SOAR and XDR platforms. You will translate analyst-driven investigations into automation to accelerate triage, enrichment, containment, and remediation across the SOC.

The ideal candidate has 2+ years in SOC, 1–2 years with SOAR (XSIAM/XSOAR), and a four-year degree or equivalent.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2+ years in SOC or security operations.
• 1–2 years with SOAR (Palo Alto XSIAM or XSOAR preferred).

Responsibilities

• Develop, test, and maintain automated playbooks and integrations across Palo Alto XSOAR and Cortex XSIAM.
• Collaborate with SOC analysts to identify manual, repetitive workflows and translate them into reliable automation.
• Experience integrating security tools and platforms to support cohesive, automated response workflows.

Skills

SOC experience

Threat investigation

Automation concepts

Education

Bachelor's degree

Tools

Palo Alto XSIAM

XSOAR

SIEM

EDR/XDR

REST APIs

JSON

Regex

Python

Job description

CBTS is seeking a Security Automation Engineer I to contribute to the growth of the Security Operations team by developing automation playbooks and workflows within our SOAR and XDR platforms. You will translate analyst-driven investigations into automation to accelerate triage, enrichment, containment, and remediation across the SOC.

The ideal candidate has 2+ years in SOC, 1–2 years with SOAR (XSIAM/XSOAR), and a four-year degree or equivalent.