Advanced Cyber Security Engineer

Alpha Consulting Corp. is seeking an experienced Advanced Cyber Security Engineer with strong expertise in Palo Alto XSOAR, Python development, and Splunk SIEM. The role focuses on developing and customizing SOAR automation workflows, integrating security tools, and enhancing SOC processes through automation.

Responsibilities:

• Develop, customize, and maintain automation workflows on Palo Alto XSOAR
• Build and enhance XSOAR playbooks, automations, integrations, and incident response workflows
• Integrate enterprise security tools with XSOAR using REST APIs and Python
• Develop reusable APIs and connectors for security platforms
• Onboard new log sources into Splunk or other SIEM platforms
• Monitor and maintain Splunk environments, dashboards, and data ingestion pipelines
• Automate repetitive Security Operations Center (SOC) tasks
• Support incident response activities through security orchestration and automation
• Evaluate and implement proof-of-concept (PoC) security tools
• Collaborate with SOC analysts, security engineers, and infrastructure teams
• Develop technical documentation for automation workflows and integrations
• Troubleshoot production issues and optimize security automation processes
• Follow cybersecurity best practices and secure coding standards

Requirements:

• Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field
• 5+ years of software development experience using Python
• Minimum 2+ years of hands-on experience customizing Palo Alto XSOAR or another SOAR platform
• Experience with Splunk or other SIEM technologies
• Strong knowledge of REST APIs and system integrations
• Experience with Python web frameworks such as: Django, Flask
• Strong understanding of Security Operations Center (SOC) processes
• Excellent analytical and troubleshooting skills
• Strong written and verbal communication skills
• Ability to work independently in a fast-paced environment
• Palo Alto XSOAR
• Splunk
• SIEM
• SOAR
• Security Operations Center (SOC)
• Incident Response
• Security Automation
• Python
• Django
• Flask
• REST APIs
• API Development
• API Integration
• Linux
• Git
• Nginx
• SQL
• Relational Databases
• JavaScript
• jQuery
• HTML
• CSS
• Threat Intelligence platforms
• Open-source Incident Response tools
• Log Management
• Security Monitoring
• Automation Frameworks
• Secure Coding Practices
• Threat Hunting
• SOC Operations
• Security Engineering
• Cloud Security
• CI/CD
• PowerShell
• Bash
• Scripting Languages
• Technical Documentation