Advanced Cyber Security Engineer

Alpha Consulting Corp. is seeking an Advanced Cyber Security Engineer to develop and customize Palo Alto XSOAR automation workflows and integrations. The role focuses primarily on XSOAR development, with additional responsibilities for Splunk administration, SIEM integrations, SOC process automation, incident response support, and security tool evaluation.

Responsibilities:

• Develop, customize, and maintain automation workflows on Palo Alto XSOAR
• Build and enhance XSOAR playbooks, automations, integrations, and incident response workflows
• Integrate enterprise security tools with XSOAR using REST APIs and Python
• Develop reusable APIs and connectors for security platforms
• Onboard new log sources into Splunk or other SIEM platforms
• Monitor and maintain Splunk environments, dashboards, and data ingestion pipelines
• Automate repetitive Security Operations Center (SOC) tasks
• Support incident response activities through security orchestration and automation
• Evaluate and implement proof-of-concept (PoC) security tools
• Collaborate with SOC analysts, security engineers, and infrastructure teams
• Develop technical documentation for automation workflows and integrations
• Troubleshoot production issues and optimize security automation processes
• Follow cybersecurity best practices and secure coding standards

Requirements:

• Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field
• 5+ years of software development experience using Python
• Minimum 2+ years of hands-on experience customizing Palo Alto XSOAR or another SOAR platform
• Experience with Splunk or other SIEM technologies
• Strong knowledge of REST APIs and system integrations
• Experience with Python web frameworks such as:
• • Django
• • Flask
• Strong understanding of Security Operations Center (SOC) processes
• Excellent analytical and troubleshooting skills
• Strong written and verbal communication skills
• Ability to work independently in a fast-paced environment
• Palo Alto XSOAR
• Splunk
• SIEM
• SOAR
• Security Operations Center (SOC)
• Incident Response
• Security Automation
• Python
• Django
• Flask
• REST APIs
• API Development
• API Integration
• Linux
• Git
• Nginx
• SQL
• Relational Databases
• Threat Hunting
• SOC Operations
• Security Engineering
• Cloud Security
• CI/CD
• PowerShell
• Bash
• Scripting Languages
• Technical Documentation
• Palo Alto XSOAR (Mandatory)
• Python Development (Mandatory)
• Splunk SIEM
• REST API Development
• SOAR Customization
• Security Automation
• Linux
• Git
• JavaScript
• jQuery
• HTML
• CSS
• Threat Intelligence platforms
• Open-source Incident Response tools
• Log Management
• Security Monitoring
• Automation Frameworks
• Secure Coding Practices