Valid Secret security clearance requiredRole OverviewDeploy, configure, and operationalize Palo Alto Cortex Security Orchestration, Automation, and Response (XSOAR), implementing automation playbooks, integrations, and incident workflows to support the Security Operations Centre (SOC).Key ResponsibilitiesDeploy and configure Cortex XSOAR platform componentsImplement incident ingestion from Elastic SIEM into XSOARBuild and maintain automation playbooksPhishing responseConfigure and maintain integrations withElastic SIEMEndpoint Detection and Response (EDR) toolsFirewalls and network toolsIdentity and Access Management (IAM) systemsTicketing platforms (ServiceNow, Jira)Implement Role-Based Access Control (RBAC) and tenant separationConfigure incident types, fields, layouts, and workflows (SecIM)Perform testing and validation of playbooks and integrationsTroubleshootAPI connectivity issuesSupport platform monitoring, upgrades, and maintenanceAssist with automation scripting (Python,



APIs)Support deployment automation and configuration managementWork closely with Architects and SOC teams to refine workflowsRequired SkillsHands‑on experience with Palo Alto Cortex XSOARExperience building automation playbooks and integrationsStrong knowledge of application programming interfaces (APIs)Scripting experience (Python preferred)Understanding of incident response workflowsExperience with Linux systems and troubleshootingIdeal Candidate Experience3–7+ years in Security Operations, Incident Response, or Security Engineering2–4+ years hands‑on experience with Cortex XSOARExperience implementing playbooks and automation in production SOC environmentsExperience integrating SIEM, EDR, identity, and ticketing toolsFamiliarity withContinuous Integration and Continuous Deployment (CI/CD) pipelinesInfrastructure as Code (IaC) (nice to have)Experience in large-scale or enterprise environmentsExposure to regulated environmentsWe’re committed to fostering an inclusive, equitable, and accessible workplace where every team member feels valued, respected, and supported, and has the prospect to reach their full potential. We welcome and encourage applications from people with disabilities.#J-18808-Ljbffr

📌 Xsoar Engineer (Secret Clearance) (Ottawa)
🏢 Ateko, backed by Bell Canada
📍 Ottawa