Palo Alto XSOAR Engineer - Secret Clearance | Remote, USA

Optiv

Optiv

Multiple locations
Posted 6+ months ago

This position will be fully remote and can be hired anywhere in the continental U.S.

Initially this will be a 6-month, unaccompanied, engagement supporting United States Africa Command (USAFRICOM) in Stuttgart Germany. After the 6months you can work remotely in the continental U.S.

We are seeking a highly skilled Palo Alto XSOAR Engineer to join our cybersecurity team. The ideal candidate will be responsible for implementing, managing, and optimizing the Palo Alto XSOAR platform to automate and orchestrate security operations. This role requires expertise in developing custom playbooks for various stakeholders, integrating with other security tools, and enhancing the overall security posture of the organization.

How you'll make an impact

  • XSOAR Platform Management:

  • Install, configure, and maintain the Palo Alto XSOAR platform.

  • Ensure the platform is operating efficiently and effectively, with minimal downtime.

  • Perform regular updates, patches, and upgrades to the XSOAR software.

  • Playbook Development:

  • Design, develop, and maintain custom playbooks to automate security incident response and other operational tasks.

  • Collaborate with stakeholders to understand their requirements and create tailored playbooks that meet their needs.

  • Test and validate playbooks to ensure they function as expected and deliver the desired outcomes.

  • Integration and Automation:

  • Integrate XSOAR with various security tools and technologies (e.g., SIEM, EDR, threat intelligence platforms).

  • Develop and maintain automation scripts and connectors to enhance the capabilities of the XSOAR platform.

  • Streamline security operations through effective automation and orchestration.

  • Incident Response:

  • Monitor and respond to security incidents using the XSOAR platform.

  • Utilize playbooks to automate incident response workflows and reduce response times.

  • Perform root cause analysis and implement corrective actions to prevent future incidents.

  • Collaboration and Communication:

  • Work closely with security analysts, IT teams, and other stakeholders to gather requirements and provide support.

  • Conduct training sessions and workshops to educate stakeholders on using the XSOAR platform and playbooks.

  • Communicate findings, recommendations, and status updates clearly to both technical and non-technical audiences.

  • Continuous Improvement:

  • Stay updated on the latest trends and advancements in cybersecurity and automation technologies.

  • Propose and implement enhancements to existing security operations and XSOAR configurations.

  • Participate in professional development and training opportunities.

What we're looking for

  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field

  • Secret level clearance required TS/SCI preferred

  • Security certification (Security+, CISSP)

  • Platform certification (Linux+, RHCE, PCNSA, PCNSE)

  • Proven experience with Palo Alto XSOAR or similar security orchestration, automation, and response (SOAR) platforms

  • Strong background in developing and maintaining automation playbooks and scripts

  • In-depth knowledge of cybersecurity principles, incident response, and security operations

  • Experience with various security tools and technologies (e.g., SIEM, EDR, threat intelligence platforms)

  • Excellent problem-solving skills and attention to detail

  • Strong communication and interpersonal skills

  • Relevant certifications (e.g., Palo Alto Networks Certified Cybersecurity Associate, Certified Information Systems Security Professional) are a plus

  • Experience with other SOAR platforms and automation tools

  • Knowledge of programming and scripting languages (e.g., Python, JavaScript)

  • Familiarity with cloud security and hybrid environment

  • Additional information about the role based in Germany

  • This is a 6-month, unaccompanied, engagement supporting United States Africa Command (USAFRICOM) in Stuttgart Germany

  • Daily personal interaction and training of stakeholders within all USAFRICOM directorates is primary focus

  • Ability to effectively present executive level status briefings and updates to USAFRICOM leadership are required

  • #LI-NA1

  • #CJ

What you can expect from Optiv

  • A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
  • Work/life balance
  • Professional training resources
  • Creative problem-solving and the ability to tackle unique, complex projects
  • Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
  • The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv + ClearShark is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Optiv + ClearShark respects your privacy. By providing your information through this page or applying for a job at Optiv + ClearShark, you acknowledge that Optiv + ClearShark will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv + ClearShark’s selection and recruitment activities. For additional details on how Optiv + ClearShark uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.