Security Analyst

Technical Qualifications

Expert-level Cortex XSIAM/XSOAR:
Proven track record of building complex, multi-stage playbooks (loops, conditional logic, and sub-playbooks).
Advanced Scripting:
Proficiency in Python and Power Shell is mandatory for custom task creation.
XQL Proficiency:
Ability to write complex queries for data correlation and dashboarding.
Security Context:
Deep understanding of the MITRE ATT&CK framework and common incident response life cycles (Phishing, Malware, Brute Force, etc.).
Integration

Experience:

Experience working with REST APIs and JSON/XML data structures.

The "80% Automator" Profile

We aren't looking for someone to just "tinker" with the UI. We need a strategist who can look at a manual SOP (Standard Operating Procedure) and identify the exact logic gates required to remove human intervention from the loop.