Key Responsibilities
Design, develop, and maintain Cortex XSOAR playbooks and automations.
Configure, customize, and administer Palo Alto Cortex XSIAM/XSOAR platforms.
Integrate XSOAR/XSIAM with third-party security tools, including SIEM, EDR, IAM, ticketing systems, cloud platforms, and threat intelligence feeds.
Automate repetitive SOC processes to improve incident response and reduce manual effort.
Investigate and respond to security incidents using XSIAM/XSOAR.
Create custom integrations using Python and REST APIs.
Develop dashboards, reports, and metrics for SOC operations.
Fine-tune detection rules, correlation rules, and automation workflows.
Collaborate with SOC analysts, security engineers, and IT teams to improve detection and response capabilities.
Perform platform upgrades, troubleshooting, and health monitoring.
Document playbooks, integrations, and operational procedures.
Stay current with emerging cyber threats, security technologies, and Palo Alto product enhancements.