Responsibilities
- Design and develop Python automation playbooks, scripts, orchestration workflows, reusable libraries, and frameworks.
- Build custom integrations connecting XSOAR with internal platforms, APIs, databases, and third-party security tools.
- Implement API authentication, retry logic, pagination, rate limiting, schema validation, and normalized cross-platform data models.
- Build and maintain CI/CD pipelines for linting, testing, and automated XSOAR content deployment.
- Manage Git workflows, code reviews, branching strategies, and release management for automation content.
- Containerize integrations with Docker and manage development and staging environments.
- Administer the XSOAR platform, including upgrades, performance tuning, high availability, monitoring, and reliability improvements.
- Implement structured logging, health checks, failure alerting, execution metrics, incident classification, enrichment pipelines, and response orchestration.
- Collaborate with SOC analysts and detection engineers to gather requirements and validate automation outcomes.
- Produce technical documentation, operational runbooks, and knowledge-transfer materials.
Requirements
- At least 5 years of professional software development experience in Python.
- Strong understanding of REST API design and consumption, including authentication, HTTP methods, status codes, and payload serialization.
- Experience with Git workflows, code reviews, and CI/CD tooling such as Jenkins, GitHub Actions, or GitLab CI.
- Experience with pytest or unittest and writing unit and integration tests.
- Working knowledge of Docker, Linux, and command-line tooling.
- Experience with JSON, YAML, XML, webhooks, and message queues.
- Experience with Cortex XSOAR, Splunk SOAR, or similar orchestration platforms is preferred.
- Familiarity with incident response workflows, MITRE ATT&CK, threat intelligence, and vulnerability management is preferred.
- Experience with demisto-sdk or the XSOAR content development framework is preferred.
- Experience with data lakes, Spark, Hadoop, Kafka, Airflow, or other large-scale data pipeline technologies is preferred.
- Exposure to LLMs, AI-assisted workflows, prompt engineering, or AI model integration is preferred.
- Exposure to SQL/NoSQL databases, data pipeline tools, and enterprise integrations such as ServiceNow, Jira, SIEM platforms, or identity providers is preferred.
Benefits
- Comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
- Development support through coaching and management opportunities.
- Collaborative, progressive, high-performing team with world-class tools and training.
- World-class training program in financial services.
- Full-time, regular salaried employment in Toronto, Canada, with 37.5 hours per week.
- Applications are accepted until September 8, 2026, at 11:59 PM on the day prior to the stated deadline date.
Tech Stack
Categories
About RBC
Royal Bank of Canada is a global financial institution with a purpose-driven, principles-led approach to delivering leading performance. Our success comes from the 94,000+ employees who leverage their imaginations and insights to bring our vision, values and strategy to life so we can help our clients thrive and communities prosper. As Canada's biggest bank and one of the largest in the world, based on market capitalization, we have a diversified business model with a focus on innovation and providing exceptional experiences to our more than 17 million clients in Canada, the U.S. and 27 other countries. Learn more at rbc.com. We are proud to support a broad range of community initiatives through donations, community investments and employee volunteer activities. See how at www.rbc.com/community-social-impact. http://rbc.com/legalstuff. La Banque Royale du Canada est une institution financière mondiale définie par sa raison d'être, guidée par des principes et orientée vers l'excellence en matière de rendement. Notre succès est attribuable aux quelque 94 000+ employés qui mettent à profit leur créativité et leur savoir faire pour concrétiser notre vision, nos valeurs et notre stratégie afin que nous puissions contribuer à la prospérité de nos clients et au dynamisme des collectivités. Selon la capitalisation boursière, nous sommes la plus importante banque du Canada et l'une des plus grandes banques du monde. Nous avons adopté un modèle d'affaires diversifié axé sur l'innovation et l'offre d'expériences exceptionnelles à nos plus de 17 millions de clients au Canada, aux États Unis et dans 27 autres pays. Pour en savoir plus, visitez le site rbc.com/francais Nous sommes fiers d'appuyer une grande diversité d'initiatives communautaires par des dons, des investissements dans la collectivité et le travail bénévole de nos employés. Pour de plus amples renseignements, visitez le site www.rbc.com/collectivite-impact-social. https://www.rbc.com/conditions-dutilisation/