Closed listing
XSOAR Engineer (Implementation & Deployment)
- Mississauga, ON, Canada
$110,000 to $140,000 CAD / year · Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Pay
- $110,000 to $140,000 CAD / year
- Job type
- Full-time
- Closing date
- Experience
- 2–4+ years hands-on experience with Cortex XSOAR
- Posting language
- English
- Posted
Similar jobs hiring now
Added
Tanium Engineer
Insight Global · Toronto, ON, Canada
$55 to $70 CAD / hour
Added
Senior Associate SIEM Implementation
PwC · Toronto, ON, Canada
Added
Senior Associate SIEM Implementation
Pwc Canada · Toronto, ON, Canada
Original job description
Archived listing. The details below describe a past opening.
Role Overview
Design, Deploy, configure, and operationalize Palo Alto Cortex Security Orchestration, Automation, and Response (XSOAR), implementing automation playbooks, integrations, and incident workflows to support the Security Operations Centre (SOC).
Key Responsibilities
- Design XSOAR architecture and deployment model (multi-tenant, scalable)
- Deploy and configure Cortex XSOAR platform components
- Define multi-tenant architecture:
- Tenant separation
- Playbook isolation
- Role-Based Access Control (RBAC) model
- Define high availability (HA), disaster recovery (DR), and backup strategies
- Implement incident ingestion from SIEM into XSOAR
- Build and maintain automation playbooks:
- Phishing response
- Suspicious login
- Malware alerts
- ETC
- Configure and maintain integrations with:
- Elastic SIEM
- Endpoint Detection and Response (EDR) tools
- Firewalls and network tools
- Identity and Access Management (IAM) systems
- Ticketing platforms (ServiceNow, Jira, BMC Remedy)
- Implement Role-Based Access Control (RBAC) and tenant separation
- Configure incident types, fields, layouts, and workflows (SecIM)
- Perform testing and validation of playbooks and integrations
- Troubleshoot:
- Integration failures
- Playbook errors
- API connectivity issues
- Support platform monitoring, upgrades, and maintenance
- Assist with automation scripting (Python, APIs)
- Support deployment automation and configuration management
- Work closely with Architects and SOC teams to refine workflows
Required Skills
- Strong experience with Palo Alto Cortex XSOAR architecture
- Hands-on experience with Palo Alto Cortex XSOAR
- Experience building automation playbooks and integrations
- Strong knowledge of application programming interfaces (APIs)
- Scripting experience (Python preferred)
- Understanding of incident response workflows
- Experience with Linux systems and troubleshooting
Ideal Candidate Experience
- 3–7+ years in Security Operations, Incident Response, or Security Engineering
- 2–4+ years hands-on experience with Cortex XSOAR
- Experience implementing playbooks and automation in production SOC environments
- Experience integrating SIEM, EDR, identity, and ticketing tools
- Familiarity with:
- Continuous Integration and Continuous Deployment (CI/CD) pipelines
- Infrastructure as Code (IaC) (nice to have)
- Experience in large-scale or enterprise environments
- Exposure to regulated environments (government, telecom, finance) is a plus
Clearance Requirement
- Active Government of Canada Secret Clearance is mandatory
More about this job
Responsibilities
Design, deploy, and operationalize the Palo Alto Cortex XSOAR platform, including the creation of automation playbooks and incident workflows. Maintain integrations with SIEM, EDR, and ticketing tools to support the Security Operations Centre.
Requirements
Requires 3-7+ years of experience in Security Operations and 2-4+ years of hands-on experience with Cortex XSOAR. A mandatory active Government of Canada Secret Clearance is required.
Skills
- Palo Alto Cortex XSOAR
- Automation Playbooks
- Python
- API Integration
- Incident Response
- Linux
- SIEM
- EDR
- RBAC
- Multi-tenant Architecture
- Disaster Recovery
- Network Security
- Identity and Access Management
- CI/CD
- Infrastructure as Code
- Security Engineering
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Engineering
- Government & Public Sector
Keywords
- Cortex XSOAR
- Palo Alto Networks
- SOAR
- Python
- API
- Elastic SIEM
- EDR
- ServiceNow
- Jira
- BMC Remedy
- RBAC
- SecIM
- Incident Response
- SOC
- Multi-tenancy
- High Availability
- Disaster Recovery
- Linux
- CI/CD
- IaC
- Security Engineering
- Government of Canada Secret Clearance
- Phishing Response
- Malware Alerts
- Network Security
- Automation
- Orchestration
- Identity and Access Management
- Enterprise Security
- Security Operations