SOC Analyst (Cortex XSOAR)

Role & responsibilities

• Design, develop, and maintain Cortex XSOAR playbooks and workflows.
• Create custom automations and integrations using Python and REST APIs.
• Integrate security tools such as:
• SIEM (Splunk, QRadar, Sentinel)
• EDR (CrowdStrike, Microsoft Defender, Cortex XDR)
• Firewalls (Palo Alto, Fortinet, Check Point)
• ITSM tools (ServiceNow, Jira)
• Threat Intelligence Platforms
• Automate incident triage, enrichment, containment, and remediation activities.
• Develop custom scripts using Python within Cortex XSOAR.
• Troubleshoot and optimize existing playbooks and integrations.
• Support SOC operations and incident response processes.
• Manage threat intelligence feeds and indicator enrichment workflows.
• Create dashboards, reports, and operational metrics.
• Perform UAT, deployment, and documentation of SOAR solutions.
• Participate in security incident investigations and automation enhancement initiatives.