SOC Analyst L2 - Palo Alto Cortex XSOAR Specialist

Join our team as a Security Operations Center (SOC) Analyst L2, specializing in Palo Alto Cortex XSOAR. You will be responsible for monitoring and analyzing security threats, implementing incident response plans, and collaborating with cross-functional teams to enhance security posture. This role requires strong analytical skills and the ability to work under pressure. Experience Required Minimum 2 years of relevant hands-on experience in Security Operations and SOAR engineering. Job Summary We are looking for a SOC L2 Security Analyst with strong hands-on experience in Palo Alto Cortex XSOAR to support deployment, integration, automation, and day-to-day management of our Security Orchestration, Automation, and Response (SOAR) platform. The ideal candidate should have experience working in Security Operations Centers, building automation workflows, integrating security products with XSOAR, troubleshooting incidents, and developing custom playbooks to improve SOC efficiency. Key Responsibilities Deploy, configure, and maintain Palo Alto Cortex XSOAR environments. Design, develop, test, and optimize XSOAR playbooks for security incident response. Integrate Cortex XSOAR with security technologies such as: SIEM EDR/XDR Firewalls Email Security Gateways Threat Intelligence Platforms IAM solutions Ticketing platforms (ServiceNow, Jira, etc.) Configure and troubleshoot XSOAR integrations using built-in and custom integrations. Develop incident automation workflows to reduce manual SOC effort. Perform troubleshooting for XSOAR deployments, integrations, automations, and connectors. Build and maintain automation scripts where required (Python or JavaScript preferred). Assist in onboarding new security products into Cortex XSOAR. Monitor automation health and resolve failed playbooks and integration issues. Work closely with SOC analysts, detection engineers, and security architects. Create technical documentation, integration guides, and operational runbooks. Participate in incident response activities and automate repetitive SOC tasks. Provide recommendations for improving SOC workflows and automation maturity. Required Skills Minimum 2 years of hands-on experience with Palo Alto Cortex XSOAR. Experience deploying and configuring Cortex XSOAR. Strong knowledge of XSOAR playbook development. Experience creating and managing incident layouts, fields, automation scripts, and integrations. Hands-on experience troubleshooting XSOAR integrations and automation failures. Experience integrating XSOAR with multiple security products and APIs. Good understanding of REST APIs, JSON, webhooks, and authentication mechanisms. Knowledge of Python scripting for XSOAR automation is highly preferred. Experience working within a Security Operations Center (SOC). Strong understanding of security incident response workflows. Familiarity with MITRE ATT&CK framework and security operations best practices. Ability to analyze logs and troubleshoot complex integration issues. Preferred Qualifications Experience with Palo Alto Cortex XDR. Experience integrating Microsoft Sentinel, Splunk, QRadar, Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto Firewalls, Proofpoint, Microsoft Defender for Office 365, or similar security platforms. Knowledge of Docker, Linux administration, and networking fundamentals. Experience working with REST APIs and API authentication. Relevant Palo Alto Networks certifications are a plus.