
Salt
Cortex XSOAR
- Permanent
- Fujairah, United Arab Emirates
- Experience 2 - 5 yrs
Job expiry date: 16/10/2026
Job overview
Date posted
01/09/2026
Location
Fujairah, United Arab Emirates
Salary
Undisclosed
Compensation
Comprehensive package
Experience
2 - 5 yrs
Seniority
Experienced
Qualification
Bachelors degree
Expiration date
16/10/2026
Job description
This Cortex XSOAR Specialist role sits alongside Cyber Defense, Platforms & Architecture, and Managed Controls teams, working together to deliver successful cybersecurity outcomes for customers. You will serve as the primary technical and operational Subject Matter Expert (SME) for automation, integration, and playbook development, supporting customer engagements both off-site and on-site. Palo Alto Networks Cortex XSOAR sits at the centre of the toolset, and demonstrating, implementing, and maximizing the value of Security Orchestration, Automation and Response (SOAR) solutions runs through the whole role. Technical and thought leadership gets provided across process and system optimization, and pre-sales, sales, and business development activities get supported alongside day-to-day delivery. Internal teams and external stakeholders collaborate closely to achieve effective, sustainable implementation of cybersecurity services. Service transitions need supporting too, working with relevant teams to bring customers and infrastructure into operations smoothly. Rapid detection, mitigation, containment, and response to cybersecurity incidents get supported by leveraging integrations across infrastructure platforms, security tools, managed assets, and customer controls. Processes, procedures, workflows, and automation activities get created, optimized, and documented on an ongoing basis. SLAs, KPIs, and OLAs get tracked and reported on, and 24x7 on-call support for critical or urgent activities is expected when needed.
Required skills
Key responsibilities
- Provide technical and thought leadership, including the optimization of processes and systems
- Support pre-sales, sales, and business development activities for new and existing services
- Collaborate with internal teams and external stakeholders to achieve effective and sustainable implementation and delivery of cybersecurity services
- Coordinate the service transition process and work with relevant teams to transition customers and infrastructure into operations effectively
- Partner proactively with internal and external stakeholders to achieve mutually beneficial outcomes
- Enable rapid and effective detection, mitigation, containment, and response to cybersecurity incidents through integrations across infrastructure platforms and security tools
- Create, optimize, and document processes, procedures, workflows, and automation activities
- Track and report on SLAs, KPIs, and OLAs
- Initiate and manage incidents, problems, issues, risks, and compliance activities
- Participate in 24x7 on-call support for critical or urgent activities
Experience & skills
- Hold a bachelor's degree in Computer Science, Information Systems, Electrical Engineering, or a closely related field
- Bring strong expertise in at least three of Security Controls Operations, Cyber Incident Response, Cybersecurity Detection, Managed Services Integration, Cyber Threat Intelligence, or Threat Hunting
- Show a minimum of 3 years of experience working with Palo Alto Networks Cortex XSOAR (formerly Demisto SOAR)
- Carry a strong understanding of cyber threats, threat actors, TTPs, and appropriate mitigation strategies across on-premises, cloud, and distributed environments
- Gain CISSP, CISM, CISA, or equivalent professional experience/certification
- Pursue ITIL certification or relevant experience
- Demonstrate hands-on experience integrating various technologies with SOAR platforms
- Apply experience designing, implementing, maintaining, and optimizing playbooks for detection, protection, containment, and mitigation of cybersecurity threats
- Draw on strong scripting and integration skills using Python, Go, Kusto/KQL, and PowerShell
- Maintain strong knowledge of information security technologies including SIEM, NGFW, CTI, and WAF, as well as IT systems such as Microsoft 365