Automation Engineer – Cortex XSOAR

Automation Engineer – Cortex XSOAR

Work Location:

Atlanta, GA 30308

Minimum years of experience: 5–8

This is an Onsite position. Relocation candidates are considered. Visa independent candidates only.

Job Description:

Develop and maintain Cortex XSOAR playbooks and automation workflows. Build integrations using Python, REST APIs, and JSON. Automate incident response, enrichment, and remediation processes. Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools. Troubleshoot and optimize existing automations. Collaborate with SOC and Security Engineering teams.

Required Skills:

• 3+ years of hands-on Cortex XSOAR experience.
• Strong Python scripting and REST API integration skills.
• Experience with SIEM, EDR, and Incident Response workflows.
• Knowledge of Linux, Git, and automation best practices.
• Excellent communication and problem-solving skills.

Preferred:

• Experience with Cortex XSIAM/XDR, Splunk, Service Now, Microsoft Sentinel, Crowd Strike, or cloud security (AWS/Azure/GCP).