Implement SOAR workflows using Logic Apps, Phantom,Demisto, and XSOAR platforms. * Perform health ... Security Operations Analyst Associate, SC-200, AZ-500, Google Professional Cloud Security Engineer ...
Implement SOAR workflows using Logic Apps, Phantom,Demisto, and XSOAR platforms. * Perform health ... Security Operations Analyst Associate, SC-200, AZ-500, Google Professional Cloud Security Engineer ...
Xsoar Engineer information
What is an XSOAR engineer?
An XSOAR Engineer is a cybersecurity professional who specializes in deploying, configuring, and maintaining Palo Alto Networks Cortex XSOAR (Extended Security Orchestration, Automation, and Response) platforms. Their main responsibilities include automating security operations, integrating threat intelligence, and developing playbooks to streamline incident response. XSOAR Engineers work closely with security teams to improve efficiency and reduce response times to cyber threats. They require strong knowledge of security operations, scripting, and integrating various security tools and APIs. This role is crucial in modern security operations centers (SOCs) to enhance automation and coordination of security processes.
What are the key skills and qualifications needed to thrive as an XSOAR engineer, and why are they important?
To thrive as an XSOAR Engineer, you need expertise in cybersecurity, scripting (such as Python), and incident response, usually supported by a degree in computer science or a related field. Familiarity with Palo Alto Cortex XSOAR, SIEM platforms, and relevant certifications like Palo Alto Networks Certified Security Automation Engineer (PCSAE) is essential. Strong problem-solving skills, attention to detail, and effective communication set top performers apart in this role. These skills and qualifications are vital for efficiently automating security operations and improving an organization's incident response capabilities.
What are some common challenges XSOAR engineers face when integrating new security tools into an existing SOAR platform?
XSOAR Engineers often encounter challenges when integrating new security tools due to differences in APIs, data formats, and authentication methods. Ensuring seamless communication between platforms requires strong troubleshooting skills and an in-depth understanding of both the SOAR platform and the third-party tool. Additionally, engineers must carefully map data fields and develop custom scripts when out-of-the-box integrations are not available. Collaboration with security analysts and vendors is essential to address compatibility issues and maintain effective automation workflows.
What is the difference between Xsoar Engineer vs Cortex XSOAR Specialist?
| Aspect | Xsoar Engineer | Cortex XSOAR Specialist |
|---|---|---|
| Certifications | Relevant security and cloud certifications, such as Palo Alto Networks certifications | Same certifications, often including Palo Alto Networks certifications |
| Work Environment | Security teams, cybersecurity firms, IT departments | Security operations centers, cybersecurity consulting firms |
| Industry Usage | Used across industries for security automation and orchestration | Primarily in cybersecurity and threat management sectors |
| Job Focus | Design, develop, and maintain Xsoar integrations and automation | Implement, optimize, and manage Cortex XSOAR platforms and playbooks |
Both roles focus on security automation with Cortex XSOAR, but Xsoar Engineers typically develop and maintain integrations, while Cortex XSOAR Specialists focus on platform deployment and management. The roles often overlap, especially in organizations using Cortex XSOAR for security operations.
What are popular job titles related to Xsoar Engineer jobs in Calgary, AB?
For Xsoar Engineer jobs in Calgary, AB, the most frequently searched job titles are:
What job categories do people searching Xsoar Engineer jobs in Calgary, AB look for?
The top searched job categories for Xsoar Engineer jobs in Calgary, AB are:
Full-time
This job post has expired today. Applications are no longer accepted.
PwC rating
8.3
Based on 77 frontline employees who took The Breakroom Quiz
26th of 72 rated business consultants
Job description
Line of Service
AdvisoryIndustry/Sector
Not ApplicableSpecialism
Cybersecurity & PrivacyManagement Level
ManagerJob Description & Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
The Opportunity
As aSenior Associate SIEM Implementation,unlock your potential and embrace the chance to drive meaningful outcomesthat'llelevate your career. Your role will include, butisn'tlimited to:
Lead technical deliverables for SIEM implementation and operations including Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, and Devo.
Perform Proof of Concept (PoC) and Proof of Value (PoV) engagements to evaluate SIEM capabilities anddemonstratevalue to stakeholders.
Conduct SIEM assessments toidentifygaps, recommend improvements, and align with security best practices.
Develop andmaintaindata pipelines for log ingestion, normalization, and enrichment across cloud and on-prem environments.
Integrate log sources using connectors, custom scripts, and parsers to ensure complete visibility and compatibility with SIEM platforms.
Build use cases aligned with NIST and MITRE ATT&CK frameworks to enable detection at various stages of acyber-attack.
Implement detection rules using SPL/KQL with complex correlation across different data sources.
Develop dashboards, alerts, and workbooks for security monitoring and reporting.
Implement SOAR workflows using Logic Apps, Phantom,Demisto, and XSOAR platforms.
Perform health checks, tuning, and optimization of SIEM platforms to ensure high performance and accuracy.
Create andmaintaindocumentation including SOPs, runbooks, architecture diagrams, and onboarding guides.
Collaborate with cross-functional teams including SOC, threat hunters, infrastructure, and cloud teams to support delivery and ensure quality standards.
Lead technical deliverables for SIEM implementation and security operations engagements, including log source onboarding, parser development, SIEM contentdeployment through CI/CD pipelines using GitHub, detection use case implementation, and operational readiness activities.
Develop and support custom integrations to SIEM platforms, especially Microsoft Sentinel and Google SecOps, including scripts, APIs, parsers, data transformation logic, and data pipeline management activities such asDataBahn.
Apply AI capabilities in a security-focused manner to improvedetectionengineering, content optimization, operational efficiency, and analytical outcomes whilemaintainingstrong security and governance awareness.
What You'll Bring
Your skills, knowledge, and experiences are what set you apart.Here'swhat we look for:
Hands-on experience with Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, Devo, and Splunk.
Strong understanding of SIEM architecture, implementation, integration, log management, and threat detection methodologies.
Experience in developing and tuning security use cases and alerts.
Proficiencyin scripting languages such as Python, PowerShell, and Bash for automation and data processing.
Experience with cloud platforms including Azure, GCP, and AWS.
Knowledge of data pipeline tools includingCriblfor log routing, enrichment, and deduplication.
Familiarity with REST APIs, JSON, and integration of third-party security tools.
Experience with SOAR platforms and playbook development for incident response automation.
Understanding ofsecurity concepts such as cyber-attacks, threat vectors, risk management, and incident management.
Strong analytical and problem-solving skills with attention to detail.
Excellent communication, documentation, and client engagement skills.
Experience deploying SIEM content through CI/CD practices using GitHub, including version control, peer review, change tracking, and structured promotion of content across environments.
Experience managing security data pipelines and ingestion workflows, including data transformation, normalization, troubleshooting, and platforms or capabilities such asDataBahn.
Strong understanding of AI concepts and tools, with the ability to apply them in security-oriented use cases such as detection improvement, threat analysis, automation support, and security operations optimization.
Proficiencyin Microsoft Office tools, especially Excel, Word, PowerPoint, Teams, and Outlook, with the ability to create polished client-facing documents, trackers, presentations, and meeting outputs.
PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer.
Qualifications:
Bachelor's degree incomputer science, Cybersecurity, or related field.
Preferred certifications: Microsoft Certified: Security Operations Analyst Associate, SC-200, AZ-500, Google Professional Cloud Security Engineer, CISSP, CISM, GIAC.
Minimum 3 years of experience in SIEM implementation and security operations.
Demonstrated ability to work collaboratively across teams and manage multiple client engagements.
Commitment to continuous learning and adapting to evolving cybersecurity technologies.
Experience ina consulting, client delivery, or professional services environment is preferred.
This newly created role reflects our commitment to growth and delivering distinctive value for our clients and stakeholders.
The salary range for this position is $84,700 - $134,700. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package.
Why you'll love PwC
We'reinspiring and empowering our people to change the world. Powered by the latest technology,you'llbe a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at:https://jobs-ca.pwc.com/ca/en/life-at-pwc
PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Metis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Professional Courage {+ 13 more}Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship?
NoGovernment Clearance Required?
NoJob Posting End Date
August 24, 2026We're committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process.The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during our recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).Nous tenons a repondre a vos besoins tout au long du processus de demande d'emploi, d'entrevue et d'embauche. Si vous avez besoin de mesures d'adaptation pour etre parfaitement a l'aise, faites-le-nous savoir a l'etape de la demande d'emploi.L'utilisation de l'intelligence artificielle (IA) dans le domaine du recrutement en est a ses balbutiements. Nous savons que vous pourriez vous demander comment et pourquoi nous y avons recours. A certains stades de notre processus de recrutement, nous comptons sur l'IA pour ameliorer votre experience. Par exemple, pendant l'examen du curriculum vit ou l'elaboration d'une liste de recommandations personnalisees, un agent conversationnel pourrait vous demander des precisions ou fixer avec vous un rendez-vous pour l'entrevue. L'IA nous aide a mieux lutter contre les prejuges, car l'evaluation des candidats se fait de facon juste et equitable, sans que les informations d'identification comme le nom ou le sexe soient connues. Elle nous permet egalement de mieux reperer les bons candidats pour un poste et d'evaluer le lien entre leurs competences, leur experience et leurs chances de reussir chez PwC Canada. Bien que l'IA facilite certaines etapes de notre processus de recrutement, les decisions finales d'embauche sont toujours prises par des personnes. Pour en savoir plus sur l'utilisation et la protection de vos donnees personnelles, consultez notre politique sur la protection des renseignements confidentiels (https://www.pwc.com/ca/fr/privacy-policy.html).
About pwc
Sourced by ZipRecruiter
We know that the future success of our firm is contingent on equitable experiences for our people. From recruitment to partnership, we’re working hard to give every person an equitable opportunity to grow and to thrive as part of our community of solvers. We understand that establishing and maintaining a fair, equitable and welcoming environment for all people requires building a culture of belonging: a shift from awareness to empathy — while demonstrating inclusive leadership that cultivates trust among our people and our clients. PwC is committed to advancing diversity, equity and inclusion (DEI) through an evidence-based strategy designed to achieve well-defined and meaningful aspirational goals. Our aim is to solve problems for the long term, as that is how we build trust and continue to build on our culture of belonging. At the core of this endeavor are stated goals and a series of linked programs enabling targeted interventions at key moments in our employees’ career trajectories.
Industry
Finance and insurance
Company size
10,000+ Employees
Headquarters location
London, London, UK