ZipRecruiter

Log In

1

Xsoar Engineer Jobs (NOW HIRING)

VOLTICAN INC

Mid Cortex XSOAR Engineer

Houston, TX · Remote

$80K/yr

Role: Cortex XSOAR Engineer Location: Remote Work Authorization: US Citizen Security Clearance: Able to get US "Public Trust" clearance Required skills/Level of Experience: As a SOAR Security ...

VOLTICAN INC

Mid Cortex XSOAR Engineer

Houston, TX · Remote

$80K/yr

Role: Cortex XSOAR Engineer Location: Remote Work Authorization: US Citizen Security Clearance: Able to get US "Public Trust" clearance Required skills/Level of Experience: As a SOAR Security ...

VOLTICAN INC

Mid Cortex XSOAR Engineer

Houston, TX · Remote

$80K/yr

Cortex XSOAR Engineer Location: Remote Work Authorization: US Citizen Security Clearance: Able to get US "Public Trust" clearance Required skills/Level of Experience: As a SOAR Security Engineer, you ...

NATIONMIND LLC

Cyber Security Engineer

Minneapolis, MN · Remote

$45 - $50/hr

Advanced Cyber Security Engineer (Splunk & Palo Alto XSOAR Developer) Location: Cincinnati, OH (Open to Remote) Duration: 12+ Months Key Responsibilities * Work closely on the Palo Alto XSOAR ...

Tata Consultancy Service Limited

Engineer

Cleveland, OH · On-site

$100K - $120K/yr

Ability to code in python inside Cortex XSIAM/XSOAR a must as all the script content being refactor and moving from XSOAR to XSIAM is python based. Roles & Responsibilities * Directly augment the ...

KPMG

Senior Associate, Cyber Operations

Albany, NY · On-site

Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; relevant certifications include XSOAR Engineer, CISSP, CCSP, CCSK, GSEC ...

next page

Showing results 1-20

All JobsXsoar Engineer Jobs

Xsoar Engineer information

What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?

To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.

What is an XSOAR engineer?

An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.

What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?

XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.

What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?

AspectXsoar EngineerCortex XSOAR Specialist
CertificationsRelevant security and cloud certifications, such as Palo Alto Networks certificationsSame certifications, often including Palo Alto Networks certifications
Work EnvironmentSecurity teams, cybersecurity firms, IT departmentsSecurity operations centers, cybersecurity consulting firms
Industry UsageUsed across industries for security automation and orchestrationPrimarily in cybersecurity and threat management sectors
Job FocusDesign, develop, and maintain Xsoar integrations and automationImplement, optimize, and manage Cortex XSOAR platforms and playbooks

Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.

More about Xsoar Engineer jobs
What cities are hiring for Xsoar Engineer jobs? Cities with the most Xsoar Engineer job openings:
What states have the most Xsoar Engineer jobs? States with the most job openings for Xsoar Engineer jobs include:
What job categories do people searching Xsoar Engineer jobs look for? The top searched job categories for Xsoar Engineer jobs are:
Xsoar Engineer jobs near you
Infographic showing various Xsoar Engineer job openings in the United States as of July 2026, with employment types broken down into 50% Full Time, 42% Contract, and 8% Nights. Highlights an 75% In-person, and 25% Remote job distribution.

Security Cortex XSOAR Engineer

CREATIVE GLOBAL CONSULTING

Remote

Full-time

Re-posted 5 days ago

Job description

Security Cortex XSOAR Engineer
Client: TriWest
POP: 12+ months
Location: Remote
US Citizen
SCOPE
As a SOAR Security Engineer, you will be responsible for assisting with the deployment, and maintenance of the Security Orchestration Automation & Response (SOAR) solution within a 24x7x365 federal security operation. The SOAR Engineer will analyze our client's business requirements / systems /networks and translate those specifications into a SOAR design that provides an efficient and effective SOAR solution within a federal cloud environment.
REQUIRED SKILLS
  • Minimum Bachelors degree in Cyber, Computer Science, or related field +7 Years relevant working experience.
  • DoD Approved 8570 certification REQUIRED such as: CompTIA Security+ , CEH, CFR, CCNA Cyber Ops, CCNA-Security, CYSA+**, GCIA, GCIH, GICSP.
  • 7+ years of relevant professional experience
  • 4+ years of SOAR Engineering / administration experience.
  • 2+ years of management of SOAR within a Federal environment.
  • Understanding of enterprise environments, specifically cloud-based and hybrid cloud environments. • Knowledge of security frameworks including such as MITRE ATT&CK, OWASP, & NIST.
  • Hands-on troubleshooting, analysis, and technical expertise to resolve incidents and/or service requests.
  • Strong written communication skills and the ability to articulate technical security analysis to a non-technical audience.
  • Understanding of possible attack activities such as network reconnaissance probing/ scanning, DDOS, malicious code activity, etc.
  • Able to troubleshoot and be a problem solver with analytical proficiency in Linux.
  • Strong scripting skills (JSPythonPowershell).
  • Attention to details, fast learner and excellent communication skills. Be able to communicate technical information in a simplified, easy to understand manner.
  • Cybersecurity knowledge and experience - advantage.
  • Provide Technical Support to top-tier customers.
  • Provide tailored troubleshooting, configuration guidance, and best practices.
  • Manage support cases to ensure issues are recorded, tracked, and resolved with timely follow-ups with thorough documentation of all the troubleshooting steps in the ticketing system.
  • Conduct multi-vendor troubleshooting on complex customer engagements and build positive customer experience by working closely with Account, Sales, and Marketing teams.
  • Utilize fault isolation and root cause analysis skills to provide post-sales technical support, configuration, troubleshooting, and standard methodologies to customers.

PREFERRED SKILLS
  • Knowledge of Federal Security Standards such as NIST and DoD.
  • Understanding and experience with FedRAMP Cloud Security Requirements.

TASKS
  • Assist with Configuration, Deployment, and Maintenance of SOAR technologies within a federal cloud environment.
  • Aid in the translation of client requirements into technical design / implementation.
  • Configuration of SOAR in accordance with DISA STIG and CIS Benchmark requirements.
  • Recommend system and process improvements to continually enhance security operations.
  • Assist security incident responders during system investigations.
  • Development of Dashboards and Reports as they relate to SOAR.
  • Responding to tickets related to SOAR configuration changes and troubleshooting.

Apply