SIEM Security Architect

Описание

This role involves hands-on design, implementation, administration, and operational support for Palo Alto Cortex XSIAM and Cortex XDR, focusing on engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.

Responsibilities

• Design, implement, administer and operationally support Palo Alto Cortex XSIAM and Cortex XDR
• Engineer and support SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations
• Perform Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing and ingestion
• Develop automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash
• Onboard and troubleshoot telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources
• Develop and tune detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic
• Create and manage complex playbooks
• Develop playbooks, runbooks, procedures and technical documentation
• Support Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs

Requirements

• Hands-on Palo Alto Cortex XSIAM and Cortex XDR design, implementation, administration and operational support
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations
• Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing and ingestion
• Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks
• Bachelor's degree in an Information Technology or Information Security related field, or eight years of relevant work experience
• Five years of experience in supporting large IT environments and/or system deployments

Nice to have

• Familiarity with industry-standard security and compliance frameworks
• CISSP, Security+ or GIAC certification
• Palo Alto Cortex, Cribl or other relevant SIEM/security platform certification

We offer

• 100% remote project
• Contract W2: $106/hr
• Contract 1099: $114/hr
• Project duration: 12 Months