About the role

We are seeking an experienced Palo Alto Cortex XSOAR Engineer to design, implement, integrate and optimise Security Orchestration, Automation and Response (SOAR) solutions using the Palo Alto Cortex XSOAR platform.

The successful candidate will automate security operations, integrate enterprise security tools, develop playbooks and improve incident response capabilities across Security Operations Centres (SOC).

Key Responsibilities

Cortex XSOAR Administration

- Install, configure and administer Palo Alto Cortex XSOAR.
- Manage tenants, roles, permissions and integrations.
- Maintain platform health, upgrades and performance.
- Configure incident types, layouts and automation workflows.
- Support platform optimisation and continuous improvement.

SOAR Development & Automation
- Design and develop automated playbooks.
- Build security orchestration workflows.
- Develop incident response automation.
- Create custom scripts using Python and JavaScript.
- Automate repetitive SOC tasks.
- Develop approval and notification workflows.

Security Integrations Develop and maintain integrations with:
- Palo Alto Cortex XDR
- Cortex XSIAM
- Palo Alto NGFW
- Prisma Cloud
- Splunk
- Microsoft Sentinel
- Microsoft Defender
- CrowdStrike
- ServiceNow
- Jira
- Active Directory
- Azure
- AWS
- Microsoft 365
- Email Security Platforms
- Threat Intelligence Platforms
- SIEM solutions
- ITSM tools
- REST APIs

Incident Response
- Automate incident triage.
- Develop containment workflows.
- Automate enrichment activities.
- Improve Mean Time to Detect (MTTD).
- Improve Mean Time to Respond (MTTR).
- Support cyber incident investigations.
- Develop standard response procedures.

Detection Engineering
- Enhance detection workflows.
- Create automated enrichment.
- Integrate threat intelligence feeds.
- Develop IOC enrichment.
- Automate case management.
- Improve alert prioritisation.

Technical Skills

Mandatory





- Palo Alto Cortex XSOAR
- Python scripting
- SIEM technologies
- Networking fundamentals

Preferred
- Cortex XDR
- Cortex XSIAM
- Palo Alto NGFW

Responsibilities

- Install and administer Cortex XSOAR.
- Develop automation playbooks.
- Create custom integrations.
- Develop Python automation scripts.
- Integrate enterprise security platforms.
- Optimise SOC workflows.
- Improve incident response processes.
- Develop dashboards and reports.
- Troubleshoot platform issues.
- Support platform upgrades.
- Deliver knowledge transfer.
- Provide customer support.

Experience

- 5+ years in Cyber Security.
- 3+ years in Security Operations (SOC).
- 2+ years hands-on experience with Cortex XSOAR.
- Experience developing SOAR playbooks.
- Experience integrating enterprise security platforms.
- Experience with API development and automation.

Qualifications

- Degree in Information Technology, Cyber Security or related discipline.
- Palo Alto Networks Certified Cybersecurity Associate (PCCSA) – Preferred.
- Palo Alto Cortex XSOAR Certification – Highly Desirable.
- PCNSE – Advantageous.
- CISSP, Security+, GSEC or equivalent – Preferred.

Key Deliverables

- Automated incident response playbooks.
- Security tool integrations.
- SOC workflow optimisation.
- Reduced MTTR and MTTD.
- Improved analyst efficiency.
- Enhanced security automation.
- Operational dashboards and reporting.
- Continuous platform optimisation.

Suitable For

This role is ideal for:

- Cortex XSOAR Engineer
- SOAR Automation Engineer
- Cyber Security Automation Engineer
- SOC Automation Specialist
- Security Integration Engineer
- Managed Security Services (MSSP)
- Enterprise Cyber Security Consultant

The role is particularly suited to enterprise environments where Cortex XSOAR is integrated with Cortex XDR, Cortex XSIAM, Splunk, Microsoft Sentinel, ServiceNow, Microsoft Defender, and other security platforms to automate incident response and improve SOC efficiency.

📌 Palo Alto Cortex XSOAR Engineer (India)
🏢 Dipole Group
📍 India