XSOAR/XDR Consultant

Saddleback Solutions is a global provider of innovative, professional quality and cost-effective training and consultancy for networking services. We need a flexible and adaptable person who can hit the ground running, but also willing and able to learn and expand their knowledge to cover more of Palo's product stack inside and outside of Palo Alto Cortex. Tasks ● Assist customers with their Incident Response efforts leveraging XSOAR (formerly Demisto) for Security Orchestration Automation and Response (SOAR) ● Learn & understand the customer’s business requirements and the threat landscape that is most applicable to their industry’s vertical sector ● Lead XSOAR technical implementation/operations in a customer environment including Playbook design, development and implementation/optimization.

• Interact with Security and IT technologies relating to customer environment
• Ability to communicate effectively in crisis situations with all levels of an organization

from Engineering/Operations to CIO/CISO audiences ● Ability to create documentation for Incident Response Plans, system integrations and XSOAR playbooks ● Ability to refine and translate complex requirements and execute best practice solutions. ● Ability to lead teams and construct plans and roadmaps for achieving customer SecOps goals. ● Other tasks and duties Requirements

• Experience in Python, Powershell or Javascript
• Experience managing complex security solutions in large environments
• Strong understanding of Linux or Unix, network troubleshooting analysis and current

security threats

• Experience in cybersecurity incident response
• Strong understanding of cybersecurity technologies, protocols and applications
• Detailed technical experience in the installation, configuration, and operation of high-

end security solutions

• Familiar with the Software Development Lifecycle (SDLC) methodology
• Experience with IDS/IPS solutions and technologies preferred
• Security Operations experience is a strong plus
• Excellent written and verbal communication skills
• GCIA, GCFE, GCIH, CISSP, and/or DevOps certifications preferred

Do not miss the chance of working with the global cybersecurity leader #J-18808-Ljbffr

---