2,469 companies use XSOAR, based on their job posts and their employees' public profiles. Its share of job posts held steady in the three months to August 2026; 1,227 job posts named it from October 2025 to August 2026. Security Analyst roles mention it most.
Among the companies with the most job posts naming XSOAR are Palo Alto Networks (758), Deloitte (227) and EY (130). Deloitte is the newest of the five companies in the table, with its first job post naming it in May 2023.
CompanyPostsPeopleRecent job post
Palo Alto NetworksScientific and Technical Services · first seen Jul 2022758131
"Direct hands-on experience deploying, managing, or supporting platforms like Cortex XDR, Cortex XSOAR, Cortex XSIAM, Cortex Cloud, or Prisma Cloud (or equivalent enterprise security technologies)."Staff Customer Success Engineer - Cortex, Nov 7, 2026
DeloitteProfessional Services · first seen May 202322796
"Typical engagements include security solutions management such as network, infrastructure, SIEM, XDR, XSOAR, etc."Senior Cyber Security Engineer, Nov 3, 2026
EYProfessional Services · first seen Aug 202213056
"Lead deployments of XSOAR, CrowdStrike Fusion, and Splunk SOAR solutions."siem soar engineer, Aug 25, 2026
CapgeminiProfessional Services · first seen Sep 202211021
"Experience with Cortex XSOAR automation"fullstack developer, May 22, 2026
TDFinance and Insurance · first seen Oct 2022732
"Expert knowledge of SIEM and UEBA solutions such as Splunk, Azure Sentinel or similar, along with experience of CrowdStrike, MS Defender for Endpoint, XSOAR."Senior Information Security Analyst, Nov 5, 2026
XSOAR holds a steady place in hiring. 0.61 in every 10,000 job posts named it from June to August 2026, against 0.65 from March to May. Its busiest month was November 2025, at 0.71.
Show the data
Month
Job posts naming XSOAR
All job posts
Per 10,000
Oct 2025
85
1,413,673
0.60
Nov 2025
130
1,822,119
0.71
Dec 2025
83
1,236,103
0.67
Jan 2026
124
1,828,002
0.68
Feb 2026
114
1,856,647
0.61
Mar 2026
122
1,850,711
0.66
Apr 2026
117
1,728,886
0.68
May 2026
112
1,821,509
0.61
Jun 2026
102
1,909,496
0.53
Jul 2026
125
1,815,180
0.69
Aug 2026
113
1,835,698
0.62
How many companies named XSOAR in a job post for the first time in recent months?
From June to August 2026, 60 companies posted their first job naming XSOAR; 64 did from March to May. The 60 from June to August are 5.2% of all 1,164 companies whose job posts name it.
March to May 202664
June to August 202660
October 2025 to August 2026250
Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.
How do we know which companies use XSOAR?
The evidence for XSOAR is close to even: 47% of these companies name it in job posts, and 53% come from employees' profiles. 333 show up in both job posts and employees' profiles.
How we knowCompaniesShare
Job posts name XSOAR
1,16447%
Employees' profiles list XSOAR
1,30553%
2,469 companies. Each is counted once, under the strongest evidence we have for it.
What size are the companies that use XSOAR?
34% of XSOAR users are companies with 50 to 999 employees, the largest size group. The second-largest group is companies with more than 5,000 employees, at 30%.
Share of its companies
Typical tech page
ShareTypical
Under 50 employees
16%22%
50 to 999
34%38%
1,000 to 5,000
20%17%
Over 5,000
30%23%
Where are XSOAR companies based?
The United States has the most XSOAR companies (43%), but Spain stands out: 3.6% of them, against 1.8% on the typical tech page. Its companies are based in 90 countries and territories.
ShareTypical
United States
43%43%
India
7.4%6.9%
France
7%4.6%
United Kingdom
4.3%6.4%
Spain
3.6%1.8%
Germany
2.9%4.4%
Companies in 90 countries and territories. Shares are of companies with a known headquarters country.
Show the data
Country
Companies
Share
Typical tech page
United States
1,023
43%
43%
India
177
7.4%
6.9%
France
166
7%
4.6%
United Kingdom
102
4.3%
6.4%
Spain
85
3.6%
1.8%
Germany
70
2.9%
4.4%
Which teams work with XSOAR?
Job posts for XSOAR point to SOC teams far more than any other, at 101 companies. Next come cybersecurity teams (46 companies) and security operations teams (26).
TeamCompanies
SOC
101
Cybersecurity
46
Security operations
26
Information security
19
Security operations center
18
IT
17
What else do XSOAR companies use?
XSOAR companies are 115 times as likely as similar companies to use Swimlane: 11% of them, against 0.1%. Next is Palo Alto Networks Cortex XDR: 18% of these companies use it, against 0.32% of similar ones.
Share of the 572 XSOAR companies counted here whose job posts also name the tool
Typical for companies the same size
Which companies started naming XSOAR in job posts recently?
73 companies with 50 or more employees picked up XSOAR in their job posts from April to August 2026. Allegiant and CBTS lead the new mid-market companies, with 4 job posts each from April to August.
Companies that named XSOAR in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.
Which roles mention XSOAR most?
Security Analyst and Security Engineer roles account for 32% of the job posts that name XSOAR. Security Analyst posts naming it numbered 54 from March to May 2026 and 54 from June to August.
RoleSharePosts
Security Analyst
19%231
Security Engineer
14%166
Information Security Engineer
7%86
SIEM Engineer
6.6%81
Product Security
3.1%38
IT Support
2.6%32
Show the data
Role
Share
Oct 2025 to Aug 2026
Mar to May 2026
Jun to Aug 2026
Security Analyst
19%
231
54
54
Security Engineer
14%
166
37
38
Information Security Engineer
7%
86
22
31
SIEM Engineer
6.6%
81
24
18
Product Security
3.1%
38
7
15
IT Support
2.6%
32
15
7
Which project themes come up in XSOAR job posts?
Apart from broad digital transformation work, Security Infrastructure Modernization comes up most in job posts naming XSOAR, in 56 of them. Generative AI is next, in 21 job posts.
Project themeJob posts
Digital Transformation217
Security Infrastructure Modernization56
Generative AI21
Cloud Migration17
"Lead end-to-end migrations from legacy SIEM and SOAR platforms such as Splunk, QRadar, Microsoft Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, and Phantom to Google SecOps"
Persistent Systems, Senior Google SecOps Engineer, Oct 21, 2026
"Deliver end-to-end migrations from Splunk, QRadar, Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, Phantom, and similar platforms to Google SecOps"
Persistent Systems, Senior Google SecOps Engineer, Sep 22, 2026
About this data
Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.
Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.
Sumble has a free plan, and the same data is available through its API and MCP server.
A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.
Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.
