Security Automation Engineer (Cortex XSOAR/Python)

About Pinnacle Group

Pinnacle Group is a nationally recognized leader in workforce solutions, known for delivering high-impact staffing, talent management, and technology services. We partner with some of the most respected companies across industries to deliver scalable, innovative solutions that drive measurable results. Our culture is rooted in performance, accountability, and collaborationempowering our teams to solve complex problems, embrace new technologies, and create value every day.

Role Overview

We are looking for a senior-level Automation Engineer with advanced expertise in Palo Alto Cortex XSOAR automation, particularly in custom integrations, automation workflows, and a strong understanding of incident management and SOC processes.

The ideal candidate will be highly skilled in building automation workflows, developing custom integrations, and driving innovation across security operations.

Key Responsibilities

• Design, develop, and maintain playbooks and automation workflows in Cortex XSOAR.
• Create and enhance custom integrations using Python.
• Collaborate closely with SOC, SIEM, and endpoint teams to translate requirements into automated solutions.
• Optimize and streamline security processes through automation.
• Support deployment, testing, and troubleshooting of automation workflows.
• Explore emerging endpoint protection techniques and integrate them into automation.
• Document workflows, scripts, and best practices effectively.

Required Skills & Qualifications

• Proven hands-on experience with Cortex XSOAR.
• Strong Python programming skills for scripting and integration development.
• Experience building and maintaining custom integrations.
• Experience with SIEM platforms such as XSIAM, QRadar, or Splunk.
• Solid understanding of SIEM concepts (log sources, use cases, correlation rules).
• Familiarity with security operations processes (incident response, alert triage, enrichment, remediation).
• Keen interest in endpoint protection technologies and their automation potential.

Preferred (Good to Have)

• Working knowledge of APIs, REST, and JSON for integration development.
• Exposure to security frameworks such as MITRE ATT&CK and NIST.