Principal Developer SOAR Automation

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

Position Summary 

 
Sony Corporation of America (SCA) is seeking a Principal Developer, SOAR Automation, GSIRT-US to join the Corporate Information Security organization located in the Reston, VA.  We are seeking a highly motivated and experienced Senior Palo Alto XSOAR Engineer to join our growing security team. In this critical role, you will play a central part in designing, implementing, and optimizing our XSOAR platform to automate workflows across security and IT functions. This will ultimately improve efficiency, accelerate threat response, and strengthen our overall security posture across our global organization. 

Responsibilities:  

• Contribute to the development and lead the execution of the overall automation and development strategy, defining and providing input for product roadmaps, managing the development and day-to-day engineering of products. 

• Architect, design and develop advanced playbooks and automations within the XSOAR platform to automate repetitive tasks and streamline workflows across the organization's entire security and IT landscape 

• Oversee the entire lifecycle development of complex SOAR playbooks, ensuring seamless integration with existing workflows and security tools 

• Develop and lead the implementation of thorough testing and validation strategy for playbooks and automations to ensure accuracy, efficiency, and adherence to security best practices 

• Analyze process workflows, business & technical requirements and translate them into actionable XSOAR playbooks to extend the existing automation capabilities  

• Develop creative approaches using XSOAR to automate threat detection, investigation, containment, eradication, and recovery processes for various security incidents 

• Work with security analysts to identify opportunities for automation and develop playbooks to streamline incident response procedures 

• Advance security operations technologies and processes by integrating threat detection and protection solutions with XSOAR 

• Stay current on emerging trends and best practices in XSOAR and security automation 

• Research and implement new XSOAR features and functionalities to optimize the platform and enhance its capabilities 

• Collaborate with and provide feedback to XSOAR engineers and product managers to contribute to the platform's ongoing development 

• Ability to Work closely with project management counterparts to coordinate, scope, plan, and lead multiple simultaneous development initiatives 

• Provide technical guidance and mentorship to junior security analysts and developers on XSOAR platform and development processes 

• Document and maintain clear and concise technical documentation for XSOAR playbooks, integrations, and configurations 

• Participate in security strategy discussions and contribute to the optimization of our overall security posture 

Qualifications: 

• Minimum of 7 years of experience in IT, information security or related field is preferred 

• Minimum of 3+ years of experience working with Security Orchestration, Automation, and Response (SOAR) platforms, preferably Palo Alto XSOAR 

• Proven experience in designing, developing, and deploying complex playbooks and automations for security incident response 

• Minimum of 5+ years of proven experience with Python  

• Strong understanding of security concepts, incident response methodologies, and best practices a big plus 

• String knowledge of version control technologies and practices and using them within a team-oriented environment. 

• Experience with cloud infrastructure management and familiarity with DevOps principles is a plus 

• Strong willingness to collaborate with other team members working toward a common goal 

• Ability to work inde