Security Architect - SIEM Engineer

SmartIMS Inc.

United States

25 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Microsoft Windows ARM Architecture Bash Shell Software as a Service Cloud Computing Cyber Security Linux Python (Programming Language) Parsing Security Information and Event Management Systems Integration Scripting

+2 more

Cyber Threat Analysis Information Technology

Requirements

Education: Bachelor’’s Degree in an Information Technology or Information Security related field (8+ years of relevant work experience may be substituted in lieu of education)
5+ years of experience support large IT environments and/or system deployments
Hands-on experience with Palo Alto Cortex, XSIAM, and Cortex XDR design, implementation, administration and operational support.
Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
Experience creating and managing complex playbooks
CRIBL Data Modeling, log pipeline design, parsing, normalization, enrichment, routing and ingestion.
Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks.