> Markdown version of [/jobs/ext/1815776-it-admin-security-architect-consultant-siem-engineer](https://www.wearedevelopers.com/jobs/ext/1815776-it-admin-security-architect-consultant-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT - ADMIN - Security Architect - Consultant - SIEM Engineer

- **Company:** DataSoft Technologies
- **Location:** Columbia, SC, United States
- **Experience:** Expert
- **Contract:** Temporary to permanent
- **Skills:** Microsoft Windows, ARM Architecture, Bash Shell, Software as a Service, Cloud Computing, Cyber Security, Linux, Python (Programming Language), Parsing, Runbook, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, Information Technology, Cybercrime, 3-tier Architectures
- **Published:** July 17, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c60b12727d436c08

## About the Role

* Bachelor's Degree in Information Technology, Information Security, or a related field. (8+ years of relevant work experience may be substituted in lieu of education.)
 * 5+ years of experience supporting large IT environments and/or system deployments.
 * Hands-on experience with Palo Alto Cortex, Cortex XSIAM, and Cortex XDR design, implementation, administration, and operational support.
 * Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center (SOC) operations.
 * Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic.
 * Experience creating and managing complex playbooks.
 * Experience with CRIBL data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
 * Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash.
 * Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources.
 * Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design, and industry-standard cybersecurity frameworks., * CISSP, Security+, or GIAC certification.
 * Palo Alto Cortex, Cribl, or other relevant SIEM/Security Platform certification.
 * Hands-on experience operating Cortex XSIAM and Cortex XDR in a large, multi-tenant environment.
 * Hands-on Cribl administration, data modeling, and log pipeline optimization experience.
 * Experience supporting Tier 1-Tier 3 SOC Analysts, threat hunting, incident response, and 24x7 operational handoffs.
 * Familiarity with industry-standard security and compliance frameworks.
 * Experience developing playbooks, runbooks, procedures, and technical documentation.

## Description

Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.
Interview Process:
1-2 Rounds of Virtual Interviews. In-person availability for interviews preferred.
Submission Deadline:
07/22 at 5:00 PM ES


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)