XSIAM Automation & Content Migration Engineer

We are seeking an experienced XSIAM Automation and Content Migration Engineer to support a large-scale migration initiative from Palo Alto Cortex XSOAR to Cortex XSIAM. The ideal candidate will have deep hands-on expertise in building customizing and deploying automation use cases within XSOAR and XSIAM environments.

This role involves refactoring and migrating existing orchestration content including Python-based scripts playbooks enrichments and automations while working closely with the internal technical execution team to ensure a seamless transition to XSIAM.

• Execute the migration of security orchestration content from Cortex XSOAR to Cortex XSIAM.
• Refactor and optimize existing content to align with XSIAM architecture and best practices.
• Directly contribute to the hands-on effort required to migrate large volumes of orchestration assets.
• Assess compatibility of existing XSOAR content and determine appropriate migration approaches.

• Design build customize and deploy automation use cases within Cortex XSIAM and XSOAR.
• Develop and enhance Python-based scripts supporting security operations workflows.
• Create and maintain reusable automation components to improve operational efficiency.
• Develop integrations with security tools APIs and third-party platforms.

• Migrate and optimize:
  • Playbooks
  • Automations
  • Enrichment workflows
  • Scripts
  • Lists
  • Integrations
  • Incident handling workflows
  • Other orchestration content
• Validate migrated content to ensure functional accuracy and performance.

• Partner closely with the internal project execution team to deliver migration milestones.
• Participate in design discussions and technical reviews.
• Provide recommendations for improving automation efficiency and maintainability.
• Troubleshoot migration challenges and implement corrective actions.

• Perform unit testing functional testing and validation of migrated content.
• Develop technical documentation migration guides and operational procedures.
• Maintain version control and deployment records.
• Support knowledge transfer activities for operations teams.

• 8-10 years of overall experience in Cyber Security Security Automation or Security Engineering.
• Proven experience implementing and supporting Security Orchestration and Automation platforms.
• Extensive hands-on experience with content migration and automation development.

• Strong hands-on experience with:
  • Palo Alto Cortex XSOAR
  • Palo Alto Cortex XSIAM
• Direct exposure to building and deploying automation use cases within XSOAR and/or XSIAM.
• Experience customizing and maintaining orchestration content.

• Strong proficiency in Python programming.
• Hands-on experience developing Python scripts within Cortex XSOAR/XSIAM environments.
• Ability to refactor existing Python-based content for migration and optimization.
• Experience working with REST APIs and external integrations using Python.

• Expertise in:
  • Playbook development
  • Workflow automation
  • Incident response orchestration
  • Security enrichment processes
  • Integration development
  • Automation troubleshooting and optimization

• Experience migrating or refactoring:
  • Scripts
  • Playbooks
  • Lists
  • Automations
  • Integrations
  • Incident workflows
  • Enrichment content

• Experience with enterprise-scale Cortex migration programs.
• Knowledge of SIEM SOAR and SOC operations.
• Familiarity with detection engineering concepts.
• Experience integrating XSOAR/XSIAM with third-party security tools.
• Understanding of CI/CD practices for automation content deployment.
• Experience using Git or other version control systems.