To Apply for this Job Click Here

Job Summary:
This role exists to execute a large-scale migration of security automation and orchestration content from Cortex XSOAR to Cortex XSIAM as part of our banking client’s enterprise AI-Ready Cyber Resilience program. The engineer will provide hands-on keyboard execution capacity to refactor, rebuild, and migrate Python-based scripts, playbooks, automations, and enrichment logic at scale.

This is a pure execution-focused content engineering role—not strategy or design-heavy—requiring deep familiarity with the Cortex ecosystem and the ability to move quickly within a structured migration effort.

Top 3 Priorities in First 90 Days

1. Execute high-volume content migration
   • Refactor and migrate XSOAR content (scripts, playbooks, lists, automations) into XSIAM.
   • Ensure functional parity and optimal performance in XSIAM.
2. Collaborate with internal execution team
   • Work alongside a team of 6 FTEs to coordinate migration sequencing and dependencies.
   • Align on standards, reuse patterns, and migration best practices.
3. Ensure code quality and deployability
   • Maintain Python script integrity during refactoring.
   • Test and validate automation workflows post-migration.

Required Skills (Must-Haves)

• 4–9+ years – Mid-to-senior level engineer. Must be able to contribute immediately with minimal ramp
• Direct hands-on experience with Cortex XSOAR AND/OR Cortex XSIAM
• Proven experience building and deploying:
  • playbooks
  • automations
  • enrichment scripts
  • orchestration workflows
• Strong Python development inside XSOAR/XSIAM
• Experience in banking or regulated environments
• Experience modifying/refactoring existing security automation content
• Experience working in execution-heavy engineering roles (high volume delivery)
• Ability to work in a team-based migration effort with defined deliverables

Nice-to-Have Skills

• Experience migrating or upgrading SIEM/SOAR platforms
• Familiarity with content conversion between platforms
• Experience with detection engineering or SOC automation teams
• Understanding of data structures within XSIAM vs XSOAR
• Exposure to CI/CD or version-controlled content deployment

Ideal Background

• Palo Alto Cortex XSOAR/XSIAM engineers
• Detection / SOAR automation engineers
• Security automation engineers in large enterprises
• Consultants who have supported Cortex implementations or migrations
• Engineers from managed security service providers (MSSPs)

To Apply for this Job Click Here