Security Automation Engineer - Remote XSOAR Expert

Secur-Serv; United States; À distance; USD 120 000 - 140 000; Plein temps

Résumé du poste

Secur-Serv is seeking a Security Automation Engineer to design and implement Cortex XSOAR/XSIAM automation playbooks for enterprise customers. This role emphasizes automation, content management, and custom integrations using Python within the Cortex ecosystem.

You will collaborate with client security teams, define automation roadmaps, and perform knowledge transfer to enable customers to scale their automation capabilities. Remote-friendly role with high autonomy.

Qualifications

• Experience building playbooks in Cortex XSOAR/XSIAM.
• Strong Python scripting for security tool integrations.
• Solid understanding of incident response and SOC workflows.

Responsabilités

• End-to-End Automation: Design, build, and maintain complex automation playbooks to standardize and accelerate incident response and security operations.
• Workflow Engineering: Analyze manual SOC processes and transform them into automated, scalable workflows.
• Content Management: Manage and deploy content packs, custom layouts, and automated dashboards tailored to customer use cases.
• Custom Integrations: Develop and maintain custom integrations using Python to connect XSIAM with third-party security tools and internal systems.
• API Utilization: Leverage RESTful APIs and JSON data structures to facilitate seamless communication between security platforms.
• Troubleshooting: Perform health checks and troubleshooting for integration scripts and automation flows.
• Stakeholder Engagement: Collaborate with customer security teams to define automation roadmaps and success metrics.
• Knowledge Transfer: Conduct technical workshops and sessions to enable customers to manage and expand their automation capabilities.

Connaissances

Cortex XSOAR/XSIAM

Python programming

Security Operations

Description du poste

Secur-Serv is seeking a Security Automation Engineer to design and implement Cortex XSOAR/XSIAM automation playbooks for enterprise customers. This role emphasizes automation, content management, and custom integrations using Python within the Cortex ecosystem.

You will collaborate with client security teams, define automation roadmaps, and perform knowledge transfer to enable customers to scale their automation capabilities. Remote-friendly role with high autonomy.