Job Description
We are seeking an experienced Advanced Cybersecurity Engineer with strong expertise in Security Orchestration, Automation, and Response (SOAR), Python development, and Splunk. The ideal candidate will have hands-on experience customizing SOAR platforms, preferably Palo Alto XSOAR, developing automation solutions, and integrating Security Operations Center (SOC) systems.
This role focuses primarily on XSOAR and Python development, with additional responsibilities involving Splunk administration, SIEM integration, API development, and security automation. The candidate should be capable of developing scalable solutions, automating SOC operations, and improving security incident response processes.
Primary Skills
Palo Alto XSOAR
SOAR Platform Customization
Python Development
Python Web Frameworks
Django
Flask
Splunk
SIEM Technologies
Security Automation
RESTful API Development
SOC Integration
Secondary Skills
JavaScript
jQuery
HTML
CSS
SQL
Database Technologies
Linux
Git
Nginx
Log Management
Incident Response
Security Operations (SecOps)
Threat Intelligence
Technical Documentation
Security Best Practices
Key Responsibilities
- Customize and enhance the Palo Alto XSOAR platform based on business and security requirements.
- Integrate existing Security Operations Center (SOC) systems using development and reusable APIs.
- Develop Python-based automation solutions to streamline SOC operations and reduce manual tasks.
- Work with stakeholders to onboard new data sources into Splunk and other SIEM platforms.
- Perform periodic maintenance and optimization of SIEM integrations.
- Develop and maintain integrations between security tools and enterprise systems.
- Deploy, test, and evaluate external proof-of-concept security tools.
- Automate security operations and incident response workflows.
- Develop and maintain RESTful APIs for integrating security platforms.
- Support security incident response and threat intelligence initiatives.
- Maintain high-quality technical documentation and follow security best practices.
Required Qualifications
- 6–8+ years of overall IT experience.
- Minimum 2 years of experience customizing SOAR platforms, preferably Palo Alto XSOAR.
- Minimum 5 years of Python development experience.
- Strong experience with Python web frameworks such as Django and Flask.
- Hands-on experience with log management and SIEM technologies such as Splunk.
- Strong understanding of API development and system integrations.
- Must meet ITAR requirements.
Preferred Qualifications
- Frontend development experience with JavaScript, jQuery, HTML, and CSS.
- Experience working with SQL databases or other database technologies.
- Good knowledge of Linux, Git, and Nginx.
- Understanding of incident response and Security Operations (SecOps).
- Ability to understand and work with code written in other scripting languages.
- Experience evaluating open-source incident response and threat intelligence tools.
- Strong technical documentation and communication skills.
- Ability to work independently, prioritize tasks, and manage multiple responsibilities.