# Companies using XSOAR

2,469 companies use XSOAR, based on their job posts and their employees' public profiles. Its share of job posts held steady in the three months to August 2026; 1,227 job posts named it from October 2025 to August 2026. Security Analyst roles mention it most.

Data as of November 9, 2026. Source: Sumble.

## Which companies name XSOAR in the most job posts?

Among the companies with the most job posts naming XSOAR are Palo Alto Networks (758), Deloitte (227) and EY (130). Deloitte is the newest of the five companies in the table, with its first job post naming it in May 2023.

| Company | Job posts | People | Recent job post |
|---|---:|---:|---|
| [Palo Alto Networks](https://sumble.com/orgs/palo-alto-networks) | 758 | 131 | "Direct hands-on experience deploying, managing, or supporting platforms like Cortex XDR, Cortex XSOAR, Cortex XSIAM, Cortex Cloud, or Prisma Cloud (or equivalent enterprise security technologies)." (Staff Customer Success Engineer - Cortex, Nov 7, 2026) |
| [Deloitte](https://sumble.com/orgs/deloitte) | 227 | 96 | "Typical engagements include security solutions management such as network, infrastructure, SIEM, XDR, XSOAR, etc." (Senior Cyber Security Engineer, Nov 3, 2026) |
| [EY](https://sumble.com/orgs/ey) | 130 | 56 | "Lead deployments of XSOAR, CrowdStrike Fusion, and Splunk SOAR solutions." (siem soar engineer, Aug 25, 2026) |
| [Capgemini](https://sumble.com/orgs/capgemini) | 110 | 21 | "Experience with Cortex XSOAR automation" (fullstack developer, May 22, 2026) |
| [TD](https://sumble.com/orgs/td-bank) | 73 | 2 | "Expert knowledge of SIEM and UEBA solutions such as Splunk, Azure Sentinel or similar, along with experience of CrowdStrike, MS Defender for Endpoint, XSOAR." (Senior Information Security Analyst, Nov 5, 2026) |

## Is hiring for XSOAR growing?

XSOAR holds a steady place in hiring. 0.61 in every 10,000 job posts named it from June to August 2026, against 0.65 from March to May. Its busiest month was November 2025, at 0.71.

| Month | Job posts naming it | All job posts | Per 10,000 job posts |
|---|---:|---:|---:|
| Oct 2025 | 85 | 1,413,673 | 0.60 |
| Nov 2025 | 130 | 1,822,119 | 0.71 |
| Dec 2025 | 83 | 1,236,103 | 0.67 |
| Jan 2026 | 124 | 1,828,002 | 0.68 |
| Feb 2026 | 114 | 1,856,647 | 0.61 |
| Mar 2026 | 122 | 1,850,711 | 0.66 |
| Apr 2026 | 117 | 1,728,886 | 0.68 |
| May 2026 | 112 | 1,821,509 | 0.61 |
| Jun 2026 | 102 | 1,909,496 | 0.53 |
| Jul 2026 | 125 | 1,815,180 | 0.69 |
| Aug 2026 | 113 | 1,835,698 | 0.62 |

## How many companies named XSOAR in a job post for the first time in recent months?

From June to August 2026, 60 companies posted their first job naming XSOAR; 64 did from March to May. The 60 from June to August are 5.2% of all 1,164 companies whose job posts name it.

| Period | Companies naming it in a job post for the first time |
|---|---:|
| March to May 2026 | 64 |
| June to August 2026 | 60 |
| October 2025 to August 2026 | 250 |

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

## How do we know which companies use XSOAR?

The evidence for XSOAR is close to even: 47% of these companies name it in job posts, and 53% come from employees' profiles. 333 show up in both job posts and employees' profiles.

| How we know | Companies | Share |
|---|---:|---:|
| Job posts name XSOAR | 1,164 | 47% |
| Employees' profiles list XSOAR | 1,305 | 53% |

## What size are the companies that use XSOAR?

34% of XSOAR users are companies with 50 to 999 employees, the largest size group. The second-largest group is companies with more than 5,000 employees, at 30%.

| Size | Share | Typical tech page |
|---|---:|---:|
| Under 50 employees | 16% | 22% |
| 50 to 999 | 34% | 38% |
| 1,000 to 5,000 | 20% | 17% |
| Over 5,000 | 30% | 23% |

## Where are XSOAR companies based?

The United States has the most XSOAR companies (43%), but Spain stands out: 3.6% of them, against 1.8% on the typical tech page. Its companies are based in 90 countries and territories.

| Country | Companies | Share | Typical tech page |
|---|---:|---:|---:|
| United States | 1,023 | 43% | 43% |
| India | 177 | 7.4% | 6.9% |
| France | 166 | 7% | 4.6% |
| United Kingdom | 102 | 4.3% | 6.4% |
| Spain | 85 | 3.6% | 1.8% |
| Germany | 70 | 2.9% | 4.4% |

## Which teams work with XSOAR?

Job posts for XSOAR point to SOC teams far more than any other, at 101 companies. Next come cybersecurity teams (46 companies) and security operations teams (26).

| Team | Companies |
|---|---:|
| SOC | 101 |
| Cybersecurity | 46 |
| Security operations | 26 |
| Information security | 19 |
| Security operations center | 18 |
| IT | 17 |

## Which roles mention XSOAR most?

Security Analyst and Security Engineer roles account for 32% of the job posts that name XSOAR. Security Analyst posts naming it numbered 54 from March to May 2026 and 54 from June to August.

| Role | Share | Oct 2025 to Aug 2026 | Mar to May 2026 | Jun to Aug 2026 |
|---|---:|---:|---:|---:|
| Security Analyst | 19% | 231 | 54 | 54 |
| Security Engineer | 14% | 166 | 37 | 38 |
| Information Security Engineer | 7% | 86 | 22 | 31 |
| SIEM Engineer | 6.6% | 81 | 24 | 18 |
| Product Security | 3.1% | 38 | 7 | 15 |
| IT Support | 2.6% | 32 | 15 | 7 |

## Which companies started naming XSOAR in job posts recently?

73 companies with 50 or more employees picked up XSOAR in their job posts from April to August 2026. Allegiant and CBTS lead the new mid-market companies, with 4 job posts each from April to August.

| Group | Company | Job posts, April to August 2026 |
|---|---|---:|
| AI native | [Gong](https://sumble.com/orgs/gong) | 1 |
| AI native | [Doppel](https://sumble.com/orgs/doppelhq) | 1 |
| AI native | [TENEX.AI](https://sumble.com/orgs/tenex-ai) | 1 |
| Commercial | [SISAP](https://sumble.com/orgs/sisap) | 3 |
| Commercial | [LeadSoC Technologies Pvt Ltd](https://sumble.com/orgs/leadsoc-technologies-india) | 2 |
| Commercial | [ShowTime Consulting](https://sumble.com/orgs/showtime-consulting) | 2 |
| Commercial | [INNOVASUR](https://sumble.com/orgs/innovasur-telecomunicaciones) | 2 |
| Commercial | [Redshift Global](https://sumble.com/orgs/redshift-consulting) | 2 |
| Mid-market | [Allegiant](https://sumble.com/orgs/allegiant-air) | 4 |
| Mid-market | [CBTS](https://sumble.com/orgs/cbts) | 4 |
| Mid-market | [Westcon-Comstor](https://sumble.com/orgs/westcon-comstor) | 3 |
| Mid-market | [Zoox](https://sumble.com/orgs/zoox) | 2 |
| Mid-market | [Lutech](https://sumble.com/orgs/lutech) | 2 |
| Enterprise | [Ingram Micro](https://sumble.com/orgs/ingram-micro) | 3 |
| Enterprise | [UnitedHealth Group](https://sumble.com/orgs/unitedhealth-group) | 2 |
| Enterprise | [Newell Brands](https://sumble.com/orgs/newell-brands) | 2 |
| Enterprise | [Access Healthcare](https://sumble.com/orgs/access-healthcare-services) | 2 |
| Enterprise | [University of Connecticut](https://sumble.com/orgs/university-of-connecticut) | 2 |

Companies that named XSOAR in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

## What else do XSOAR companies use?

XSOAR companies are 115 times as likely as similar companies to use Swimlane: 11% of them, against 0.1%. Next is Palo Alto Networks Cortex XDR: 18% of these companies use it, against 0.32% of similar ones.

| Tool | Companies | Also name it | Typical | Times as common |
|---|---:|---:|---:|---:|
| Swimlane | 65 | 11% | 0.1% | 115 times |
| Palo Alto Networks Cortex XDR | 101 | 18% | 0.32% | 55 times |
| Splunk Enterprise Security | 153 | 27% | 0.6% | 45 times |
| Elastic Security | 44 | 7.7% | 0.18% | 44 times |
| MISP | 75 | 13% | 0.32% | 41 times |
| Recorded Future | 37 | 6.5% | 0.17% | 37 times |
| Exabeam | 35 | 6.1% | 0.19% | 32 times |
| Google Chronicle | 71 | 12% | 0.39% | 31 times |

Shares are out of the 572 companies whose job posts name XSOAR, not counting firms whose job posts name almost every technology.

## Which project themes come up in XSOAR job posts?

Apart from broad digital transformation work, Security Infrastructure Modernization comes up most in job posts naming XSOAR, in 56 of them. Generative AI is next, in 21 job posts.

| Project theme | Job posts |
|---|---:|
| Digital Transformation | 217 |
| Security Infrastructure Modernization | 56 |
| Generative AI | 21 |
| Cloud Migration | 17 |

- "Lead end-to-end migrations from legacy SIEM and SOAR platforms such as Splunk, QRadar, Microsoft Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, and Phantom to Google SecOps" (Persistent Systems, Senior Google SecOps Engineer, Oct 21, 2026)
- "Deliver end-to-end migrations from Splunk, QRadar, Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, Phantom, and similar platforms to Google SecOps" (Persistent Systems, Senior Google SecOps Engineer, Sep 22, 2026)

## About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.