Senior PS Consultant Cortex XSOAR Automaon Professional Services | Security Automaon & Orchestraon About Trantor Inc Trantor Inc. is a global technology services and consul¢ng company headquartered in Palo Alto, California, with delivery centers across the USA, Canada, and India. We partner with Fortune 500 companies and high-growth enterprises to drive digital transforma¢on through Product Engineering, Cloud Enablement, Data & AI Solu¢ons, Automa¢on, and Customer Success Services. At Trantor, we thrive in a collabora¢ve, agile, and people-rst environment. Why Join Trantor? Trantor oers the opportunity to work on diverse, cu¢ng-edge projects in a culture that values innova¢on, con¢nuous learning, and collabora¢on. Enjoy the exibility of a hybrid/remote role while contribu¢ng to impac¢ul ini¢a¢ves in a truly global organiza¢on. About the Opportunity We are seeking an experienced Senior Automa¢on Engineer specializing in Palo Alto Networks Cortex XSOAR to design, develop, and implement advanced security automa¢on solu¢ons for enterprise customers. This is a highly technical, hands-on role requiring strong exper¢se in Python programming, REST APIs, custom integra¢ons, XSOAR playbook development, and security opera¢ons automa¢on. The ideal candidate will have extensive experience automa¢ng complex Security Opera¢ons Center (SOC) workows, integra¢ng diverse security technologies, and developing scalable solu¢ons that improve incident detec¢on, inves¢ga¢on, and response. Beyond technical implementa¢on, the role involves working directly with enterprise customers to understand their security opera¢ons challenges, translate requirements into eec¢ve automa¢on solu¢ons, and provide technical leadership throughout project delivery. Key Responsibili¢es 1. Cortex XSOAR Development & Automa¢on
•
• Architect, design, develop, and implement complex automa¢on solu¢ons using Palo Alto Networks Cortex XSOAR. Develop, customize, and op¢mize sophis¢cated XSOAR playbooks for security incident inves¢ga¢on, enrichment, containment, and remedia¢on.
•
•
•
•
• Build advanced automa¢on scripts using Python, including custom commands, reusable func¢ons, and integra¢on components. Develop custom XSOAR integra¢ons with third-party security products, enterprise applica¢ons, and internal systems. Design automated workows involving condi¢onal logic, parallel execu¢on, error handling, approvals, and complex decision-making. Develop reusable automa¢on components and playbook frameworks to improve maintainability, scalability, and opera¢onal eciency. Troubleshoot and op¢mize exis¢ng integra¢ons, scripts, and playbooks to improve automa¢on reliability and performance. 2. API Integra¢on & Technical Engineering Design and implement integra¢ons using REST APIs, webhooks, JSON, and other relevant integra¢on mechanisms. Work with authen¢ca¢on and authoriza¢on mechanisms, including API keys, OAuth 2.0, tokens, and service accounts. Integrate XSOAR with security pla¢orms such as SIEM, EDR/XDR, rewalls, threat intelligence pla¢orms, vulnerability management solu¢ons, and ITSM systems. Troubleshoot API connec¢vity, authen¢ca¢on failures, data transforma¢on issues, and integra¢on errors. Apply so¢ware engineering best prac¢ces, including modular development, version control, tes¢ng, debugging, and code reviews. Develop automa¢on solu¢ons capable of handling high-volume security events and complex enterprise environments. 3.



SOC Automa¢on & Security Use Cases Analyze exis¢ng SOC processes and iden¢fy opportuni¢es to improve eciency through automa¢on.
• Design and implement automated security workows for common SOC use cases, including: Phishing inves¢ga¢on and response. Malware detec¢on and containment. Endpoint alert inves¢ga¢on and remedia¢on. Threat intelligence enrichment and indicator management. Iden¢ty-related security incidents and suspicious authen¢ca¢on ac¢vi¢es. Vulnerability management and remedia¢on workows. SIEM alert enrichment, correla¢on, and automated response. Incident ¢cket crea¢on, enrichment, escala¢on, and closure. Apply knowledge of incident response methodologies and the MITRE ATT&CK; framework to design eec¢ve automa¢on workows. Op¢mize analyst workows to reduce manual interven¢on, improve response consistency, and reduce Mean Time to Respond (MTTR). Implement appropriate safeguards, approval mechanisms, and excep¢on-handling processes for automated response ac¢ons. 4. Customer Engagement & Solu¢on Delivery Lead technical discussions and requirement-gathering workshops with enterprise customers. Assess customer SOC environments, exis¢ng tooling, and opera¢onal workows to iden¢fy automa¢on opportuni¢es. Translate business and technical requirements into detailed automa¢on designs and implementa¢on plans. Independently deliver complex XSOAR implementa¢on, customiza¢on, and integra¢on projects. Provide technical guidance on XSOAR architecture, integra¢on strategies, development best prac¢ces, and automa¢on design. Troubleshoot complex customer environments and resolve technical issues during implementa¢on and produc¢on opera¢ons. Conduct solu¢on demonstra¢ons, technical walkthroughs, knowledge-transfer sessions, and customer enablement ac¢vi¢es. Prepare comprehensive technical documenta¢on, including solu¢on designs, integra¢on specica¢ons, playbook workows, test plans, and opera¢onal runbooks. 5. Technical Leadership & Best Prac¢ces Serve as a technical subject ma¢er expert for Cortex XSOAR automa¢on and integra¢on development. Review automa¢on designs and code to ensure quality, security, scalability, and maintainability. Establish development standards and reusable frameworks for playbooks, integra¢ons, and automa¢on scripts. Mentor junior engineers and provide technical guidance on complex automa¢on challenges. Contribute to the con¢nuous improvement of XSOAR implementa¢on methodologies, engineering prac¢ces, and service oerings. Required Skills & Experience Core Technical Requirements Cortex XSOAR Exper¢se Strong hands-on experience implemen¢ng, developing, customizing, and troubleshoo¢ng Palo Alto Networks Cortex XSOAR. Advanced understanding of XSOAR architecture, playbooks, automa¢ons, integra¢ons, incident types, layouts, classiers, mappers, and incident handling. Proven experience building complex, produc¢on-grade XSOAR playbooks and custom integra¢ons. Experience troubleshoo¢ng playbook execu¢on failures, integra¢on issues, and automa¢on performance problems. Python Programming & Automa¢on Development Strong hands-on Python programming skills are mandatory.



Proven experience developing custom Python scripts, automa¢on frameworks, API integra¢ons, and reusable components. Prociency in working with JSON, data structures, excep¢on handling, logging, and debugging. Ability to independently write, troubleshoot, and op¢mize complex automa¢on code. Familiarity with Git, so¢ware development prac¢ces, and automated tes¢ng. API & Integra¢on Engineering Advanced understanding of REST APIs, HTTP methods, webhooks, and JSON-based integra¢ons. Experience implemen¢ng API authen¢ca¢on mechanisms such as OAuth 2.0, API keys, and token-based authen¢ca¢on. Strong troubleshoo¢ng skills involving API responses, authen¢ca¢on, network connec¢vity, and data transforma¢on. Experience integra¢ng mul¢ple enterprise security pla¢orms into centralized orchestra¢on workows. Security Opera¢ons & Incident Response Solid understanding of SOC opera¢ons, security alert triage, incident inves¢ga¢on, and response workows.
• Experience integra¢ng XSOAR with SIEM, EDR/XDR, threat intelligence, rewall, and ITSM pla¢orms.
•
• Prac¢cal knowledge of common security use cases and incident response procedures. Understanding of the MITRE ATT&CK; framework and its applica¢on to security opera¢ons. Professional Experience
• 8+ years of overall experience in cybersecurity engineering, security automa¢on, so¢ware development, or related technical disciplines.
• 4+ years of hands-on experience with Cortex XSOAR, including advanced playbook development, Python scrip¢ng, and custom integra¢ons.
•
• Proven experience delivering complex automa¢on solu¢ons in enterprise environments. Demonstrated ability to independently design, develop, troubleshoot, and deploy produc¢on-grade automa¢on solu¢ons.
•
• Experience working directly with enterprise customers in technical consul¢ng, implementa¢on, or professional services engagements. Strong analy¢cal, troubleshoo¢ng, communica¢on, and technical documenta¢on skills. Preferred Qualica¢ons
• Experience working with SIEM pla¢orms such as Splunk, Microso¢ Sen¢nel, IBM QRadar, or ArcSight.
• Familiarity with Palo Alto Networks security pla¢orms, including Cortex XDR, Cortex XSIAM, and next-genera¢on rewalls.
•
• Experience with cloud environments such as AWS, Azure, or GCP. Knowledge of CI/CD prac¢ces, Git-based development workows, and automated tes¢ng.
• Experience designing automa¢on solu¢ons for large-scale or mul¢-tenant SOC environments.
•
• Familiarity with addi¢onal security orchestra¢on pla¢orms is advantageous. Relevant cer¢ca¢ons in Palo Alto Networks technologies, Python development, or cybersecurity are desirable. What We Are Looking For We are looking for a hands-on automa¢on engineer and problem solver, not someone whose experience is limited to deploying XSOAR or conguring prebuilt playbooks. The ideal candidate should be capable of:
•
•
•
•
• Independently developing complex XSOAR playbooks and Python-based automa¢ons. Building custom integra¢ons with security tools using REST APIs. Troubleshoo¢ng complex automa¢on and integra¢on failures. Understanding SOC workows and transla¢ng them into scalable automa¢on solu¢ons. Engaging directly with customers to design and deliver technically sound solu¢ons. The key dieren¢ator will be demonstrated depth in Python programming, Cortex XSOAR development, and the ability to engineer complex security automa¢on solu¢ons independently.

📌 PS Consultant XSOAR Automation And SIEM (Bengaluru)
🏢 Trantor
📍 Bengaluru