... Security Automation Engineer / Architect (contractor) to design and build enterprise-scale ... Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ...
... Security Automation Engineer / Architect (contractor) to design and build enterprise-scale ... Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Collaborating with security operations center analysts and threat detection engineers to prioritize ... Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...
Xsoar Engineer information
What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?
To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.
What is an XSOAR engineer?
An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.
What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?
XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.
What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?
| Aspect | Xsoar Engineer | Cortex XSOAR Specialist |
|---|---|---|
| Certifications | Relevant security and cloud certifications, such as Palo Alto Networks certifications | Same certifications, often including Palo Alto Networks certifications |
| Work Environment | Security teams, cybersecurity firms, IT departments | Security operations centers, cybersecurity consulting firms |
| Industry Usage | Used across industries for security automation and orchestration | Primarily in cybersecurity and threat management sectors |
| Job Focus | Design, develop, and maintain Xsoar integrations and automation | Implement, optimize, and manage Cortex XSOAR platforms and playbooks |
Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.
What are popular job titles related to Xsoar Engineer jobs in Colorado?
For Xsoar Engineer jobs in Colorado, the most frequently searched job titles are:
What job categories do people searching Xsoar Engineer jobs in Colorado look for?
The top searched job categories for Xsoar Engineer jobs in Colorado are:
What cities in Colorado are hiring for Xsoar Engineer jobs?
Cities in Colorado with the most Xsoar Engineer job openings:
Contractor
Re-posted 21 days ago
Job description
Position: Tines Developer (or Splunk SOAR) (26-07024)
Location: Addison, TX, Denver, CO, Chicago, IL, Jacksonville, FL, Washington DC (Onsite 5 days)
Duration: 12 month contract (ext up to 24 months)
We are hiring a senior-level Security Automation Engineer / Architect (contractor) to design and build enterprise-scale automation on Tines at one of the largest banks in the world. This is a hands-on architect role responsible for building safe, auditable, regulator-ready automation that touches hundreds of thousands of assets across security and infrastructure systems.
Required Skills & Experience
Preferred
Location: Addison, TX, Denver, CO, Chicago, IL, Jacksonville, FL, Washington DC (Onsite 5 days)
Duration: 12 month contract (ext up to 24 months)
We are hiring a senior-level Security Automation Engineer / Architect (contractor) to design and build enterprise-scale automation on Tines at one of the largest banks in the world. This is a hands-on architect role responsible for building safe, auditable, regulator-ready automation that touches hundreds of thousands of assets across security and infrastructure systems.
Required Skills & Experience
- 10+ years in security engineering, SOAR, or automation engineering - with 5+ years at large enterprise scale, preferably in banking, financial services, or another regulated industry.
- Hands-on Tines experience building production workflows at enterprise scale (Stories, Sub-Stories, Cases, Credentials, Tenants, Workbench, AI Actions). Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ability to ramp quickly on Tines.
- Strong Python and REST/GraphQL API integration skills; comfortable with OAuth 2.0, JWT, mTLS, secrets management, and rate-limit / retry / idempotency patterns.
- Deep enterprise integration experience across EDR, endpoint management, SIEM, ITSM, IAM, CMDB, vulnerability scanners, threat intel, cloud (Azure / AWS), and CI/CD tooling.
- Strong background in vulnerability management, patch operations, and change management across Windows, Linux, macOS, containers, and cloud workloads.
- Proven ability to design approval gates, segregation of duties, rollback procedures, and human-in-the-loop controls in automated change workflows.
- Experience producing audit and regulatory evidence for automated changes
- Strong reliability engineering instincts: monitoring, alerting, replay, versioning, source control, CI/CD-style promotion across environments.
- Excellent written and verbal communication; comfortable briefing executives and partnering with audit, risk, and GRC teams.
Preferred
- Former staff/principal engineer at a large enterprise, large bank, or SOAR vendor.
- Tines certifications; CISSP, GIAC, or OSCP a plus (not required).
About Redolent
Sourced by ZipRecruiter
Redolent, a dynamic and rapidly expanding company committed to excellence in software solutions, where success is fueled by a combination of technical expertise and efficient management practices. Our solutions create a measurable delta in our clients’ productivity and profitability, contributing to their growth and success.
Industry
It services
Company size
51 - 200 Employees
Headquarters location
San Jose, CA, US
Year founded
2008