Job Summary
We design, build, and maintain scalable automation workflows across detection and response platforms. We deliver cross-platform automation that enables fast, reliable response actions. We develop, deploy, and continuously optimise automation for performance, resilience, and coverage. We work with SOC and engineering teams to identify automation opportunities. We produce clear documentation to support delivery, troubleshooting, and continuous improvement. We build and maintain workflows across SIEM, EDR, and SOAR platforms. We develop reusable scripts, templates, and components. We ensure our solutions support secure, multi-tenant environments. We embed automation into SOC workflows. We share best practices and support team development. We support workshops, onboarding, and solution design where needed. We automate repeatable triage and response activities for SOC Analysts. We integrate automation into tooling and detections with Platform and Detection Engineers. We provide technical input for customer solutions with Sales and Pre‑Sales teams.
Technologies
Technologies: Cloud, Support, PowerShell, Python, Security, DevOps.
Responsibilities
- Collaborate closely with SOC, engineering, sales, and pre‑sales teams, and support workshops, onboarding, and solution design where needed.
- Embed automation into SOC workflows.
- Automate repeatable triage and response activities for SOC Analysts.
- Integrate automation into tooling and detections with Platform and Detection Engineers.
- Provide technical input for customer solutions with Sales and Pre‑Sales teams.
- Develop reusable scripts, templates, and components.
- Ensure solutions support secure, multi‑tenant environments.
Qualifications
- 2+ years of experience in SOC, automation, or cloud security engineering.
- Experience in managed services or multi‑tenant environments.
- Strong experience building automations across SIEM, SOAR, or EDR platforms.
- Proficiency in scripting, such as Python or PowerShell.
- Experience working with APIs, webhooks, and authentication methods.
- Knowledge of threat frameworks such as MITRE ATT&CK.
- Understanding of cloud security, identity, and event‑driven automation.
- Strong communication and analytical skills.
- Hands‑on experience with Palo Alto XSOAR.
- Security clearance, such as NPPV and/or SC, may be required.
- Desirable certifications:
- Palo Alto Networks Certified XSOAR Engineer
- Palo Alto Networks Certified Security Automation Engineer (PCSAE)
- Palo Alto Networks Security Operations Professional
#J-18808-Ljbffr…