More jobs:
Cyber Detection & Automation Engineer; XSOAR to XSIAM Migration Execution
Job in
Cleveland, Cuyahoga County, Ohio, 44101, USA
Listed on 2026-06-23
Listing for:
HEITMEYER CONSULTING INC
Full Time
position Listed on 2026-06-23
Job specializations:
-
IT/Tech
Cybersecurity, Systems Engineer
Job Description & How to Apply Below
Job Summary:
This role exists to execute a large-scale migration of security automation and orchestration content from Cortex XSOAR to Cortex XSIAM as part of our banking client’s enterprise AI-Ready Cyber Resilience program. The engineer will provide hands‑on keyboard execution capacity to refactor, rebuild, and migrate Python-based scripts, playbooks, automations, and enrichment logic at scale.
This is a pure execution-focused content engineering role
—not strategy or design‑heavy—requiring deep familiarity with the Cortex ecosystem and the ability to move quickly within a structured migration effort.
- Refactor and migrate XSOAR content (scripts, playbooks, lists, automations) into XSIAM.
- Ensure functional parity and optimal performance in XSIAM.
- Work alongside a team of 6 FTEs to coordinate migration sequencing and dependencies.
- Align on standards, reuse patterns, and migration best practices.
- Maintain Python script integrity during refactoring.
- Test and validate automation workflows post-migration.
- 4–9+ years – Mid‑to‑senior level engineer. Must be able to contribute immediately with minimal ramp.
- Direct hands‑on experience with Cortex XSOAR AND/OR Cortex XSIAM
- Proven experience building and deploying:
- playbooks
- automations
- enrichment scripts
- orchestration workflows
- Strong Python development inside XSOAR/XSIAM
- Experience in banking or regulated environments
- Experience modifying/refactoring existing security automation content
- Experience working in execution-heavy engineering roles (high volume delivery)
- Ability to work in a team‑based migration effort with defined deliverables
- Experience migrating or upgrading SIEM/SOAR platforms
- Familiarity with content conversion between platforms
- Experience with detection engineering or SOC automation teams
- Understanding of data structures within XSIAM vs XSOAR
- Exposure to CI/CD or version‑controlled content deployment
- Palo Alto Cortex XSOAR/XSIAM engineers
- Detection / SOAR automation engineers
- Security automation engineers in large enterprises
- Consultants who have supported Cortex implementations or migrations
- Engineers from managed security service providers (MSSPs)
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×