1

Xsoar Engineer Jobs in Atlanta, GA (NOW HIRING)

... g., Phantom, Cortex XSOAR). • Familiarity with cloud-native logging and monitoring (AWS ... programming (Python, Bash, PowerShell). • Exposure to other SIEM platforms and security ...

Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process ... Cortex XSOAR, and AI agentic frameworks, including Model Context Protocol (MCP) or Agent ...

Xsoar Engineer information

What is an XSOAR engineer?

An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.

What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?

To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.

What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?

XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.

What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?

AspectXsoar EngineerCortex XSOAR Specialist
CertificationsRelevant security and cloud certifications, such as Palo Alto Networks certificationsSame certifications, often including Palo Alto Networks certifications
Work EnvironmentSecurity teams, cybersecurity firms, IT departmentsSecurity operations centers, cybersecurity consulting firms
Industry UsageUsed across industries for security automation and orchestrationPrimarily in cybersecurity and threat management sectors
Job FocusDesign, develop, and maintain Xsoar integrations and automationImplement, optimize, and manage Cortex XSOAR platforms and playbooks

Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.

What cities near Atlanta, GA are hiring for Xsoar Engineer jobs?

Cities near Atlanta, GA with the most Xsoar Engineer job openings:

Infographic showing various Xsoar Engineer job openings in Atlanta, GA as of August 2026, with employment types broken down into 100% Full Time. Highlights an 49% In-person, and 51% Hybrid job distribution.

Consultant | Identity Management | IDAM-Design , work flow , Implementation

Spruce Infotech

Atlanta, GA • On-site

Full-time

Re-posted yesterday


Job description

POC: Bharath Subramanya
******ATTENTION ALL SUPPLIERS******
READ BEFORE SUBMITTING:
• UPDATED CONTACT NUMBER and EMAIL ID is a MANDATORY REQUEST from our client for all the submissions
• Limited to 2 submission per supplier. Please submit your best.
• We prioritize endorsing those with complete and accurate information
• Avoid submitting duplicate profiles. We will Reject/Disqualify immediately.
• Make sure that candidate's interview schedules are updated. Please inform the candidate to keep their lines open.
MANDATORY: Please include in the resume the candidate's complete & updated contact information (Phone number, Email address and Skype ID) as well as a set of 5 interview timeslots over a 72-hour period after submitting the profile when the hiring managers could potentially reach to them. PROFILES WITHOUT THE REQUIRED DETAILS and TIME SLOTS will be REJECTED.
Job title: Automation Engineer - Cortex XSOAR
Work Location: Atlanta, USA
XXXXXX/hr
Minimum years of experience: 5-8 Year
Would you require the candidates to meet you for in person interview? YES
Is Skype/WebEx interview,OK? OK
Is this onsite/remote position: Onsite
If onsite, will you be considering relocation candidates: YES
Does this position require Visa independent candidates only? Yes
Job Description:
Develop and maintain Cortex XSOAR playbooks and automation workflows.
Build integrations using Python, REST APIs, and JSON.
Automate incident response, enrichment, and remediation processes.
Integrate XSOAR with SIEM, EDR, IAM, ITSM, and security tools.
Troubleshoot and optimize existing automations.
Collaborate with SOC and Security Engineering teams.
Required Skills
3+ years of hands-on Cortex XSOAR experience.
Strong Python scripting and REST API integration skills.
Experience with SIEM, EDR, and Incident Response workflows.
Knowledge of Linux, Git, and automation best practices.
Excellent communication and problem-solving skills.
Preferred: Experience with Cortex XSIAM/XDR, Splunk, ServiceNow, Microsoft Sentinel, CrowdStrike, or cloud security (AWS/Azure/GCP).
Project Code: Child code for Cyber Security Mysore SEZ