Job title: Automation Engineer – Cortex XSOAR -- W2 Only
Work Location: Atlanta, USA - Onsite
Minimum years of experience: 5–8 Year
Does this position require Visa independent candidates only? Yes
Job Description:
Develop and maintain Cortex XSOAR playbooks and automation workflows.
Build integrations using Python, REST APIs, and JSON.
Automate incident response, enrichment, and remediation processes.
Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools.
Troubleshoot and optimize existing automations.
Collaborate with SOC and Security Engineering teams.
Required Skills:
3+ years of hands-on Cortex XSOAR experience.
Strong Python scripting and REST API integration skills.
Experience with SIEM, EDR, and Incident Response workflows.
Knowledge of Linux, Git, and automation best practices.
Excellent communication and problem-solving skills.
Preferred: Experience with Cortex XSIAM/XDR, Splunk, ServiceNow, Microsoft Sentinel, CrowdStrike, or cloud security (AWS/Azure/GCP).