XSIAM Automation & Content Migration Engineer

Job Title: XSIAM Automation and Content Migration Engineer

Job Summary

We are seeking an experienced XSIAM Automation and Content Migration Engineer to support a large-scale migration initiative from Palo Alto Cortex XSOAR to Cortex XSIAM. The ideal candidate will have deep hands-on expertise in building, customizing, and deploying automation use cases within XSOAR and XSIAM environments.

This role involves refactoring and migrating existing orchestration content, including Python-based scripts, playbooks, enrichments, and automations, while working closely with the internal technical execution team to ensure a seamless transition to XSIAM.

Key Responsibilities

XSOAR to XSIAM Content Migration

• Execute the migration of security orchestration content from Cortex XSOAR to Cortex XSIAM.
• Refactor and optimize existing content to align with XSIAM architecture and best practices.
• Directly contribute to the hands-on effort required to migrate large volumes of orchestration assets.
• Assess compatibility of existing XSOAR content and determine appropriate migration approaches.

Automation Development & Engineering

• Design, build, customize, and deploy automation use cases within Cortex XSIAM and XSOAR.
• Develop and enhance Python-based scripts supporting security operations workflows.
• Create and maintain reusable automation components to improve operational efficiency.
• Develop integrations with security tools, APIs, and third-party platforms.

Playbook & Orchestration Management

• Migrate and optimize:
  • Playbooks
  • Automations
  • Enrichment workflows
  • Scripts
  • Lists
  • Integrations
  • Incident handling workflows
  • Other orchestration content
• Validate migrated content to ensure functional accuracy and performance.

Collaboration & Delivery

• Partner closely with the internal project execution team to deliver migration milestones.
• Participate in design discussions and technical reviews.
• Provide recommendations for improving automation efficiency and maintainability.
• Troubleshoot migration challenges and implement corrective actions.

Testing & Documentation

• Perform unit testing, functional testing, and validation of migrated content.
• Develop technical documentation, migration guides, and operational procedures.
• Maintain version control and deployment records.
• Support knowledge transfer activities for operations teams.

Required Skills & Qualifications

Experience

• 8-10 years of overall experience in Cyber Security, Security Automation, or Security Engineering.
• Proven experience implementing and supporting Security Orchestration and Automation platforms.
• Extensive hands-on experience with content migration and automation development.

Essential Technical Skills

Cortex Expertise

• Strong hands-on experience with:
  • Palo Alto Cortex XSOAR
  • Palo Alto Cortex XSIAM
• Direct exposure to building and deploying automation use cases within XSOAR and/or XSIAM.
• Experience customizing and maintaining orchestration content.

Python Development

• Strong proficiency in Python programming.
• Hands-on experience developing Python scripts within Cortex XSOAR/XSIAM environments.
• Ability to refactor existing Python-based content for migration and optimization.
• Experience working with REST APIs and external integrations using Python.

Security Automation

• Expertise in:
  • Playbook development
  • Workflow automation
  • Incident response orchestration
  • Security enrichment processes
  • Integration development
  • Automation troubleshooting and optimization

Content Migration

• Experience migrating or refactoring:
  • Scripts
  • Playbooks
  • Lists
  • Automations
  • Integrations
  • Incident workflows
  • Enrichment content

Preferred Qualifications

• Experience with enterprise-scale Cortex migration programs.
• Knowledge of SIEM, SOAR, and SOC operations.
• Familiarity with detection engineering concepts.
• Experience integrating XSOAR/XSIAM with third-party security tools.
• Understanding of CI/CD practices for automation content deployment.
• Experience using Git or other version control systems.