Soar Engineer
Denver, CO · On-site
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All ... Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
Soar Engineer
Denver, CO · On-site
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All ... Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All ... Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
Quick apply
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All ... Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
... Security Automation Engineer / Architect (contractor) to design and build enterprise-scale ... Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ...
... Security Automation Engineer / Architect (contractor) to design and build enterprise-scale ... Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Xsoar Engineer information
What is an XSOAR engineer?
An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.
What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?
To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.
What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?
XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.
What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?
| Aspect | Xsoar Engineer | Cortex XSOAR Specialist |
|---|---|---|
| Certifications | Relevant security and cloud certifications, such as Palo Alto Networks certifications | Same certifications, often including Palo Alto Networks certifications |
| Work Environment | Security teams, cybersecurity firms, IT departments | Security operations centers, cybersecurity consulting firms |
| Industry Usage | Used across industries for security automation and orchestration | Primarily in cybersecurity and threat management sectors |
| Job Focus | Design, develop, and maintain Xsoar integrations and automation | Implement, optimize, and manage Cortex XSOAR platforms and playbooks |
Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.
What are popular job titles related to Xsoar Engineer jobs in Colorado?
For Xsoar Engineer jobs in Colorado, the most frequently searched job titles are:
What job categories do people searching Xsoar Engineer jobs in Colorado look for?
The top searched job categories for Xsoar Engineer jobs in Colorado are:
What cities in Colorado are hiring for Xsoar Engineer jobs?
Cities in Colorado with the most Xsoar Engineer job openings:
Full-time
Medical, Dental, Vision, Retirement, PTO
Re-posted 3 days ago
Job description
ClearFocus Technologies, a HUBZone certified company, is located in Leesburg, VA.We specialize in cybersecurity and support multiple government and commercial clients for a variety of missions. We value our clients, integrity and employees and believe a single person can make a difference!
We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more!
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All applicants must have an active Top-Secret clearance and SCI/Q eligibility. No exceptions.
Job Summary
We are seeking a highly skilled SOAR Engineer to design, develop, and maintain security automation solutions that enhance our Security Operations Center (SOC). The ideal candidate will have experience with SOAR platforms, security tool integrations, scripting, and incident response processes. This role will focus on automating repetitive security tasks, improving response times, and increasing operational efficiency.
Key Responsibilities
We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more!
We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All applicants must have an active Top-Secret clearance and SCI/Q eligibility. No exceptions.
Job Summary
We are seeking a highly skilled SOAR Engineer to design, develop, and maintain security automation solutions that enhance our Security Operations Center (SOC). The ideal candidate will have experience with SOAR platforms, security tool integrations, scripting, and incident response processes. This role will focus on automating repetitive security tasks, improving response times, and increasing operational efficiency.
Key Responsibilities
- Design, develop, test, and deploy SOAR playbooks and automation workflows.
- Integrate security tools such as SIEM, EDR, threat intelligence, ticketing, and IAM solutions with the SOAR platform.
- Automate incident response processes for phishing, malware, unauthorized access, and other security events.
- Develop and maintain API integrations with third-party security products.
- Collaborate with SOC analysts, threat hunters, and incident responders to identify automation opportunities.
- Monitor and optimize SOAR platform performance, scalability, and reliability.
- Create technical documentation, workflow diagrams, and operational procedures.
- Troubleshoot automation failures and improve existing playbooks.
- Participate in change management and security engineering initiatives.
- Stay current with emerging cybersecurity threats, technologies, and automation best practices.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
- 8+ years of experience in cybersecurity, SOC operations, security engineering, or incident response.
- Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
- Strong scripting skills in Python, PowerShell, or similar languages.
- Experience with REST APIs and security tool integrations.
- Knowledge of SIEM technologies and security operations workflows.
- Understanding of network security, cloud security, and threat detection concepts.
- Excellent problem-solving and communication skills.
- Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud.
- Security certifications such as CISSP, Security+, or CEH.
- Experience with DevSecOps, CI/CD pipelines, containerization, or AI-driven security automation.
- Knowledge of EDR, XDR, IAM, and threat intelligence platforms.
- SOAR Platforms
- Python / PowerShell
- REST APIs
- SIEM (Splunk, Elastic, QRadar)
- Incident Response
- Threat Intelligence
- Security Automation
- Playbook Development
- Cloud Security
- Linux Administration
- Git / CI-CD
- Security Tool Integrations
About ClearFocus Technologies
Sourced by ZipRecruiter
Company size
11 - 50 Employees
Headquarters location
Leesburg, VA, US
Year founded
2012