Security Automation Engineer

Four-year college degree resulting in a bachelor's degree, or equivalent practical experience.

Certifications, Accreditations, Licenses One or more of the following certifications: Palo Alto Cortex, CompTIA Security+, CompTIA CySA+, GIAC GSEC, EC-Council CEH, and similar.

Special Knowledge The ideal candidate has a solid understanding of cybersecurity principles, common attack techniques, and SOC operational workflows.

Candidate will have experience with SIEM, SOAR, EDR/XDR, threat intelligence, endpoint protection, and email security technologies.

Familiarity with SOAR playbook development is required, with Palo Alto XSIAM and/or XSOAR experience being strongly preferred.

Candidates should understand common detection use cases including phishing, endpoint compromise, identity threats, and network anomalies.

Proficiency in Python for scripting and automation tasks is required.

Candidates must be comfortable working with REST APIs, Regex, and JSON to build and troubleshoot platform integrations.

Familiarity with Windows, MacOS, and Linux environments is expected.

Develop, test, and maintain automated playbooks and integrations across Palo Alto XSOAR and Cortex XSIAM.

Collaborate with SOC analysts to identify manual, repetitive workflows and translate them into reliable automation.

integrating security tools and platforms to support cohesive, automated response workflows.

Strong analytical skills to evaluate playbook performance, identify logic gaps, and iterate based on analyst feedback and operational data.

Effective problem-solving to troubleshoot integration and automation failures.

Clear verbal and written communication skills, with the ability to document playbook logic and contribute to design discussions across distributed teams.

Abilities Ability to work independently, manage time effectively, and stay productive in a remote environment.

Must be a collaborative team player capable of contributing to technical conversations and troubleshooting sessions.

High attention to detail to ensure automation logic performs accurately under varied conditions.

Commitment to continuous learning and staying current with evolving threats, detection techniques, and automation capabilities.

Ability to adapt playbook logic as the threat landscape and tool stack change over time.