> Markdown version of [/jobs/ext/1355701-siem-engineer](https://www.wearedevelopers.com/jobs/ext/1355701-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Engineer - **Company:** Resourcesoft, Inc. - **Location:** Columbia, SC, United States - **Experience:** Expert - **Salary:** $131,300.0 - $237,350.0 - **Contract:** Permanent contract - **Skills:** ARM Architecture, Bash Shell, Cyber Security, Information Technology Consulting, Python (Programming Language), Routing, Parsing, Runbook, Security Information and Event Management, Cyber Threat Analysis, Cybercrime, Api Management - **Published:** July 20, 2026 - **Apply:** https://www.careerjet.com/jobad/us779b02f85dd893ae65c8a7b97e008a87 ## About the Role 5 or more years of experience in enterprise security systems and large-scale SIEM deployments. Proficiency in Palo Alto Cortex XSIAM and Cortex XDR platform engineering. Experience with Cribl data modeling, log pipeline routing, parsing, and ingestion. Experience in engineering SIEM architectures for multi-tenant and 24x7 Security Operations Centers. Experience with developing correlation rules, threat-hunting queries, and automated playbooks. Experience in Python and Bash scripting for custom response workflows and API integrations. Excellent verbal and written communication skills. ## Description Design, implement, and optimize Palo Alto Cortex XSIAM and Cortex XDR in large-scale multi-tenant environments. Configure tenant-specific roles, secure access controls, and data segregation for multiple integrated agencies. Engineer detection rules, correlation analytics, threat-hunting queries, and alert suppression logic. Deploy Cribl log pipelines to route, parse, normalize, and enrich telemetry from cloud and endpoint sources. Develop and test automated response playbooks and playbooks for incident triage using Python and Bash. Support Security Operations Center analysts with platform troubleshooting, threat hunting, and technical escalation. Author operational runbooks, standard operating procedures, and architecture diagrams for SIEM services. Founded in 1999, Resourcesoft, Inc. is a leading Technology Consulting and Professional Services organization. Headquartered in Marlborough, MA, the company serves the technology needs of its clients nationwide. Resourcesoft has often been recognized by prominent rating agencies for its exemplary growth and stability. With over two decades of industry experience, the Company has evolved as a front runner in enabling project optimization. We partner with leading organizations to provide technology solutions within the financial, insurance, education, government, publishing, healthcare and pharmaceutical domains. We take pride in mentoring a workforce that is well positioned to respond to the emerging IT trends and needs. With the employees at the crux of every business endeavor, our success is driven by our expertise in pairing the right talent with the best jobs in the technology sector. We forge long term, personalized relationships with our employees to advance their career to the next level. We engage them in technology centric client projects that provide opportunities for them to evolve, innovate and deliver world class products and services. Our career opportunities offer challenging assignments and exposure to emerging and cutting edge technologies. We are committed to providing our employees with the tools necessary to accelerate their career progression, while maintaining a healthy, work-life balance. We are deeply committed to providing a workplace ambience that is both challenging and fulfilling. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Software Engineer Career: Things You Should Know](https://www.wearedevelopers.com/magazine/143-software-engineer-career-things-you-should-know) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)