Job Description
Valid Secret security clearance required
Role Overview
Deploy, configure, and operationalize Palo Alto Cortex Security Orchestration, Automation, and Response (XSOAR), implementing automation playbooks, integrations, and incident workflows to support the Security Operations Centre (SOC).
Key Responsibilities
- Deploy and configure Cortex XSOAR platform components
- Implement incident ingestion from Elastic SIEM into XSOAR
- Build and maintain automation playbooks
- Phishing response
- Configure and maintain integrations with
- Elastic SIEM
- Endpoint Detection and Response (EDR) tools
- Firewalls and network tools
- Identity and Access Management (IAM) systems
- Ticketing platforms (ServiceNow, Jira)
- Implement Role-Based Access Control (RBAC) and tenant separation
- Configure incident types, fields, layouts, and workflows (SecIM)
- P...