XSOAR Developer (SOAR Engineer)

We are seeking expert XSOAR Developers with deep SIEM/SOAR experience to architect security orchestration platforms for enterprise cybersecurity operations. Join our security engineering team to build automation playbooks, integrate threat intelligence feeds, and deploy scalable SOAR solutions across complex hybrid environments.

Role Summary

As an XSOAR Developer, you'll design, deploy, and optimize Palo Alto Networks XSOAR (Cortex XSOAR) platforms, create Python automation playbooks, and integrate with SIEM solutions like Microsoft Sentinel, FortiSOAR, and Devo. You'll independently drive security investigations from POC to production deployment with minimal supervision.

Must-Have Skills

• Strong knowledge of Log management, SIEM, and SOAR solutions (FortiSOAR mandatory)
• In-depth experience with automation, playbooks, Python scripting
• Expertise in REST/SOAP APIs, authentication mechanisms, JSON/XML integrations
• Hands-on with DevOps tools: Git, Artifactory, GitHub Actions, Azure DevOps, JIRA, Ansible
• Proficiency in Linux utilities, TCP/IP networking, security protocols
  
  

Key Responsibilities

• Deploy and manage security solutions (XSOAR, SIEM, EDR) in complex environments
• Develop Python automation playbooks for incident response orchestration
• Build integrations using REST/SOAP APIs, JDBC, XML/JSON, threat intelligence feeds
• Create user-friendly UI layouts, data models, ETL processes (SQL/KQL)
• Implement Azure services: App Service, Functions, APIM, Blob Storage, Key Vault
• Containerize solutions using Docker; manage CI/CD pipelines
• Drive investigations independently, develop POCs, and deliver production solutions
• Troubleshoot network/security issues (firewalls, proxies, DLP, XDR)
  
  

Good-to-Have Skills

• Experience with Devo, ArcSight, Microsoft Sentinel, FortiSOAR, XSOAR
• UI/UX development for security dashboards
• Advanced networking troubleshooting (DNS, HTTP, SMTP, FTP)
• Endpoint protection, XDR, network/host firewalls integration
  
  

Skills: devops,azure,firewalls,security,automation,soar,python,siem