ZipRecruiter

Log In

1

Xsoar Engineer Jobs in Arizona (NOW HIRING)

All JobsXsoar Engineer JobsXsoar Engineer Jobs in Arizona

Xsoar Engineer information

What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?

To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.

What is an XSOAR engineer?

An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.

What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?

XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.

What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?

AspectXsoar EngineerCortex XSOAR Specialist
CertificationsRelevant security and cloud certifications, such as Palo Alto Networks certificationsSame certifications, often including Palo Alto Networks certifications
Work EnvironmentSecurity teams, cybersecurity firms, IT departmentsSecurity operations centers, cybersecurity consulting firms
Industry UsageUsed across industries for security automation and orchestrationPrimarily in cybersecurity and threat management sectors
Job FocusDesign, develop, and maintain Xsoar integrations and automationImplement, optimize, and manage Cortex XSOAR platforms and playbooks

Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.

What are popular job titles related to Xsoar Engineer jobs in Arizona? For Xsoar Engineer jobs in Arizona, the most frequently searched job titles are:
What job categories do people searching Xsoar Engineer jobs in Arizona look for? The top searched job categories for Xsoar Engineer jobs in Arizona are:
What cities in Arizona are hiring for Xsoar Engineer jobs? Cities in Arizona with the most Xsoar Engineer job openings:
Xsoar Engineer jobs near you

Senior DSPM Engineer - Cybersecurity / Information Security

Navtech, Inc.

Phoenix, AZ • On-site

$103K - $140K/yr

Contractor

Re-posted 23 days ago

Job description

Hi,
My name is Sam, and I am a Staffing Specialist at Venstar Technology Inc. I have an open opportunity that you may be a good fit for. If this sounds like something you would be interested in, please get in touch with me as soon as possible at sam@venstartech.comwith your most recent resume, your ideal time and number for communication, and the expected pay rate for C2C/1099/W2.
Job Description:
Role: Senior DSPM Engineer (Individual Contributor)
Function: Cybersecurity / Information Security
Reports To: Leader, Data Security Posture Management (DSPM)
Location: Hybrid - (Phoenix, AZ)
Employment Type: Long-term Independent Contractor who can work on W2/1099
Role Overview
We are hiring a hands-on Senior DSPM Engineer to deliver the technical execution of our Data Security Posture Management program. Reporting to the DSPM Leader, this is an individual contributor role focused on deploying, configuring, integrating, tuning, and operating the DSPM toolchain-primarily Palo Alto Networks Cortex (Cortex XSIAM, Cortex Cloud, and Dig Security DSPM) and 1touch.io-to discover sensitive data, classify it, detect risk, and drive remediation across cloud, SaaS, and on-premises environments. You will live in the consoles every day: writing classifiers and policies, building integrations, triaging findings, automating workflows, and partnering with cloud, data, and SecOps teams to close issues at the source.
Key Responsibilities
  • Deploy, configure, and operate Palo Alto Networks Cortex (Cortex XSIAM, Cortex XDR, and Cortex Cloud) end-to-end-connectors, data ingestion, parsers, content packs, correlation rules, and dashboards.
  • Implement and run Dig Security (Palo Alto Cortex DSPM) for cloud data discovery, classification, Data Detection & Response (DDR), and posture remediation across AWS, Azure, and GCP.
  • Implement and operate 1touch.io for sensitive data discovery, classification, lineage, and identity-to-data mapping across structured, unstructured, semi-structured, and mainframe data sources.
  • Build and tune custom classifiers, policies, and detection rules to identify PII, PHI, PCI, financial data, secrets, and regulated content with low false-positive rates.
  • Onboard new cloud accounts, data stores (S3, RDS, Redshift, Blob, SQL, Cosmos, BigQuery, Snowflake, Databricks, etc.), SaaS apps, and on-prem sources into the DSPM platforms.
  • Triage DSPM findings (shadow data, public exposure, over-permissive access, sensitive-data movement, anomalies) and drive remediation with cloud, data, and application owners.
  • Build integrations and automations between Cortex, Dig, 1touch.io, SIEM/SOAR, ticketing (Jira/ServiceNow), and chat (Slack/Teams) using APIs, webhooks, and scripting (Python).
  • Author and maintain Cortex XSIAM XQL queries, XSOAR/XSIAM playbooks, and detection content tied to data-centric use cases (insider risk, ransomware, exfiltration, and misconfiguration).
  • Perform routine health checks, version upgrades, agent/sensor management, and capacity tuning of all DSPM platforms.
  • Document architectures, runbooks, standard operating procedures, and onboarding guides; act as the technical SME during audits, customer reviews, and incident response.
  • Partner with the DSPM Leader to translate the program roadmap into shippable technical deliverables and measurable risk reduction.

Required Qualifications & Skills
Must-Have Technical Experience
  • 5+ years in cybersecurity / cloud security / data security engineering, with the majority of recent time spent in hands-on technical delivery (not pure advisory or management).
  • Strong, hands-on production experience with Palo Alto Networks Cortex-at minimum two of: Cortex XSIAM, Cortex XDR, Cortex XSOAR, Cortex Cloud-including content development and integration work.
  • Hands-on experience implementing and operating Dig Security (Palo Alto Cortex DSPM) for cloud data discovery, classification, and DDR.
  • Hands-on experience implementing and operating 1touch.io for sensitive data discovery, classification, and data lineage / identity mapping.
  • Solid working knowledge of cloud data services across AWS, Azure, and GCP, plus IAM concepts (roles, policies, and identity federation) as they relate to data access.
  • Strong understanding of data classification, DLP concepts, and applicable regulations (GDPR, CCPA/CPRA, HIPAA, PCI DSS).

Education & General Requirements:
  • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.
  • Strong written and verbal communication; able to explain technical findings to engineers and to non-technical stakeholders.
  • Self-directed, detail-oriented, and comfortable owning technical workstreams from design through operations.

Core Competencies:
  • Practitioner mindset - happiest in the console, in the API, and in the data.
  • Bias for automation; you'd rather codify a fix than repeat a click.
  • Strong ownership: you see findings through to closure, not just detection.
  • Comfortable working closely with a leader and translating program goals into hands-on engineering work.

Thanks for your valuable time!!!
Sam Taylor
Venstar Technology Inc., Talent Acquisition Manager
Phone: +1 224-296-3545 | Email: sam@venstartech.com
Office Address: 1901 North Roselle Rd, Ste. #800 Schaumburg, IL 60195
Website: www.venstartech.com
Disclaimer: We respect your Online Privacy. This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. If you are not interested in receiving our emails, please reply with a "REMOVE" in the subject line and mention all the email addresses to be removed and any email addresses that might divert the emails to you. We are sorry for the inconvenience.
Navtech logo

About Navtech

Sourced by ZipRecruiter

Industry

Civil engineering construction

Company size

11 - 50 Employees

Headquarters location

New Bloomfield, PA, US

Year founded

1996

View All Navtech Jobs

Apply