Role & responsibilities
- 3+ years of hands-on experience with Palo Alto Cortex XSOAR.
- Strong experience developing and troubleshooting XSOAR playbooks.
- Good understanding of REST APIs, JSON, HTTP/HTTPS and webhooks.
- Good understanding of security operations and incident response processes.
- Working knowledge of Python scripting for XSOAR automation.
- Ability to troubleshoot Python-based automation scripts.
- Experience integrating security products using REST APIs.
- Positive understanding of SIEM, EDR/XDR, NDR, Firewall, Threat Intelligence and ITSM technologies.
- Understanding of MITRE ATT&CK; and common SOC detection/response workflows.
- Provide L2 engineering and operational support for the Palo Alto Cortex XSOAR platform within a 24x7 SOC environment.
- Design, develop, configure, test and maintain SOAR playbooks, automations, integrations and incident workflows.
- Translate SOC use cases and analyst requirements into scalable and repeatable security automation workflows.
- Troubleshoot failed playbooks, integrations, automation scripts,



incident-processing workflows and API connectivity issues.
- Integrate XSOAR with SIEM, EDR/XDR, NDR, firewalls, WAF, vulnerability management, threat intelligence, email security, IAM and ITSM platforms.
- Continuously identify opportunities to reduce manual SOC activities through automation and orchestration.
- Support L1/L2 SOC analysts in troubleshooting automated investigation and response workflows.
- Ensure SOAR automation follows defined security, change management, audit and operational standards.
- Configure and administer Cortex XSOAR incidents, incident types, layouts, fields, classifications, mappings and indicators.
- Develop and maintain XSOAR playbooks for security investigation, enrichment, containment, remediation and ticket management.
- Configure conditional logic, loops, manual approval steps, data transformations and automated tasks within playbooks.
- Customize out-of-the-box Palo Alto content packs

📌 Walk-in || SIEM (Bengaluru)
🏢 Deloitte Shared Services India
📍 Bengaluru