1

Xsoar Engineer Jobs in Colorado (NOW HIRING)

Xsoar Engineer information

What are the key skills and qualifications needed to thrive as an XSOAR Engineer, and why are they important?

To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.

What is an XSOAR Engineer?

An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.

What are some common challenges XSOAR Engineers face when integrating new security tools into an existing SOAR platform?

XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.

What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?

AspectXsoar EngineerCortex XSOAR Specialist
CertificationsRelevant security and cloud certifications, such as Palo Alto Networks certificationsSame certifications, often including Palo Alto Networks certifications
Work EnvironmentSecurity teams, cybersecurity firms, IT departmentsSecurity operations centers, cybersecurity consulting firms
Industry UsageUsed across industries for security automation and orchestrationPrimarily in cybersecurity and threat management sectors
Job FocusDesign, develop, and maintain Xsoar integrations and automationImplement, optimize, and manage Cortex XSOAR platforms and playbooks

Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.

What job categories do people searching Xsoar Engineer jobs in Colorado look for? The top searched job categories for Xsoar Engineer jobs in Colorado are:
What cities in Colorado are hiring for Xsoar Engineer jobs? Cities in Colorado with the most Xsoar Engineer job openings:
Infographic showing various Xsoar Engineer job openings in Colorado as of July 2026, with employment types broken down into 58% Full Time, 36% Contract, and 6% Nights. Highlights an 74% In-person, and 26% Remote job distribution.
Tines Developer / Splunk SOAR Developer

Tines Developer / Splunk SOAR Developer

Redolent, Inc.

Denver, CO • On-site

Contractor

Posted 20 hours ago


Job description

Position: Tines Developer (or Splunk SOAR) (26-07024)
Location: Addison, TX, Denver, CO, Chicago, IL, Jacksonville, FL, Washington DC (Onsite 5 days)
Duration: 12 month contract (ext up to 24 months)
We are hiring a senior-level Security Automation Engineer / Architect (contractor) to design and build enterprise-scale automation on Tines at one of the largest banks in the world. This is a hands-on architect role responsible for building safe, auditable, regulator-ready automation that touches hundreds of thousands of assets across security and infrastructure systems.
Required Skills & Experience
  • 10+ years in security engineering, SOAR, or automation engineering - with 5+ years at large enterprise scale, preferably in banking, financial services, or another regulated industry.
  • Hands-on Tines experience building production workflows at enterprise scale (Stories, Sub-Stories, Cases, Credentials, Tenants, Workbench, AI Actions). Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ability to ramp quickly on Tines.
  • Strong Python and REST/GraphQL API integration skills; comfortable with OAuth 2.0, JWT, mTLS, secrets management, and rate-limit / retry / idempotency patterns.
  • Deep enterprise integration experience across EDR, endpoint management, SIEM, ITSM, IAM, CMDB, vulnerability scanners, threat intel, cloud (Azure / AWS), and CI/CD tooling.
  • Strong background in vulnerability management, patch operations, and change management across Windows, Linux, macOS, containers, and cloud workloads.
  • Proven ability to design approval gates, segregation of duties, rollback procedures, and human-in-the-loop controls in automated change workflows.
  • Experience producing audit and regulatory evidence for automated changes
  • Strong reliability engineering instincts: monitoring, alerting, replay, versioning, source control, CI/CD-style promotion across environments.
  • Excellent written and verbal communication; comfortable briefing executives and partnering with audit, risk, and GRC teams.

Preferred
  • Former staff/principal engineer at a large enterprise, large bank, or SOAR vendor.
  • Tines certifications; CISSP, GIAC, or OSCP a plus (not required).

Redolent logo

About Redolent

Sourced by ZipRecruiter

Redolent, a dynamic and rapidly expanding company committed to excellence in software solutions, where success is fueled by a combination of technical expertise and efficient management practices. Our solutions create a measurable delta in our clients’ productivity and profitability, contributing to their growth and success.

Industry

It services

Company size

51 - 200 Employees

Headquarters location

San Jose, CA, US

Year founded

2008

Social media