Advanced Cybersecurity Engineer

Quick Facts

• Role: Advanced Cybersecurity Engineer
• Work mode: Remote
• Duration: 6 months
• Experience: 6–8+ years

Description

Advanced Cybersecurity Engineer to customize and enhance a Palo Alto XSOAR SOAR environment and build Python-based automation for SOC incident response. You will also support Splunk administration, SIEM integration, and RESTful API development to connect security tools and enterprise systems.

Responsibilities

• Customize and enhance the Palo Alto XSOAR platform based on business and security requirements
• Integrate existing SOC systems using development and reusable APIs
• Develop Python-based automation solutions to streamline SOC operations
• Work with stakeholders to onboard new data sources into Splunk and other SIEM platforms
• Perform periodic maintenance and optimization of SIEM integrations
• Develop and maintain integrations between security tools and enterprise systems
• Deploy, test, and evaluate external security proof-of-concept tools
• Automate security operations and incident response workflows
• Develop and maintain RESTful APIs for integrating security platforms
• Support security incident response and threat intelligence initiatives
• Maintain high-quality technical documentation and follow security best practices

Requirements

• 6–8+ years of overall IT experience
• Minimum 2 years customizing SOAR platforms, preferably Palo Alto XSOAR
• Minimum 5 years Python development experience
• Strong experience with Python web frameworks such as Django and Flask
• Hands-on experience with log management and SIEM technologies such as Splunk
• Strong understanding of API development and system integrations
• Must meet ITAR requirements

Benefits

• Reasonable accommodations available for qualified applicants with disabilities and for sincerely held religious beliefs
• Employment may be contingent upon job-related pre-employment screening (e.g., background/reference checks and, where permitted, drug testing)