> Markdown version of [/jobs/ext/1835534-siem-analytics-dash-boarding-saas-linux-scripting](https://www.wearedevelopers.com/jobs/ext/1835534-siem-analytics-dash-boarding-saas-linux-scripting). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Analytics Dash Boarding SaaS Linux Scripting... - **Company:** Coolsoft LLC - **Location:** Columbia, SC, United States (Remote available) - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** Data Analysis, ARM Architecture, Software as a Service, Cyber Security, Parsing, Performance Tuning, Shell Script, Security Information and Event Management, Systems Integration, Trusted Systems, Cybercrime - **Published:** July 16, 2026 - **Apply:** https://www.juju.com/job/00000000gh0g6d ## About the Role SUCCESSFUL CANDIDATE: THIS CONTRACTOR WILL BE PRIMARILY FOCUSED ON CORTEX XSIAM AND CORTEX XDR ENGINEERING, ADMINISTRATION, DETECTION CONTENT, AUTOMATION AND OPERATIONAL SUPPORT WHILE ALSO PROVIDING IMPORTANT SECONDARY SUPPORT FOR CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT AND INGESTION. THE ROLE REQUIRES HANDS-ON EXPERIENCE SUPPORTING BOTH SECURITY ENGINEERING AND SOC OPERATIONS, INCLUDING MULTI-TENANT ONBOARDING, TENANT-SPECIFIC CONFIGURATIONS, ACCESS CONTROLS, DATA SEPARATION, INTEGRATIONS, DASHBOARDS, REPORTING, INCIDENT RESPONSE, THREAT HUNTING, PLAYBOOKS, RUN BOOKS, STANDARD OPERATING PROCEDURES AND ANALYST ENABL EMENT. THE CANDIDATE MUST BE ABLE TO SUPPORT STRATEGIC PLANNING, SOLUTION DESIGN, IMPLEMENTATION, TROUBLESHOOTING, PERFORMANCE OPTIMIZATION AND CONTINUOUS IMPROVEMENT OF SECURE SYSTEMS AND SERVICES. MANDATORY SCREENING REQUIREMENTS: THESE REQUIREMENTS ARE STRICTLY ENFORCED AND NON-NEGOTIABLE. NO EXCEPTIONS CAN BE GRANTED. CANDIDATES WHO CANNOT PASS THESE REQUIREMENTS WILL NOT BE ELIGIBLE FOR HIRE. ALL APPLICANTS MUST SUCCESSFULLY PASS A FULL CREDIT CHECK AND CRIMINAL BACKGROUND CHECK DURING THE INITIAL HIRING PROCESS. ONCE ONBOARD, THEY MUST OBTAIN AND RETAIN ANNUAL CJIS CERTIFICATION AS PART OF THE ONGOING EMPLOYMENT PROCESS. OTHER: THIS POSITION IS 100% REMOTE AND WILL PARTICIPATE IN A MONTHLY ON-CALL ROTATION SUPPORTING THE 24X7 SOC. AFTER-HOURS MAINTENANCE, INCIDENT ESCALATION SUPPORT AND OPERATIONAL HAND OFFS MAY BE REQUIRED AS NEEDED. POSITION TITLE: SECURITY ARCHITECT - CONSULTANT - SIEM ENGINEER PRE-EMPLOYMENT CHECKS: MANDATORY SCREENING REQUIREMENTS: THESE REQUIREMENTS ARE STRICTLY ENFORCED AND NON-NEGOTIABLE. NO EXCEPTIONS CAN BE GRANTED. CANDIDATES WHO CANNOT PASS THESE REQUIREMENTS WILL NOT BE ELIGIBLE FOR HIRE. ALL APPLICANTS MUST SUCCESSFULLY PASS A FULL CREDIT CHECK AND CRIMINAL BACKGROUND CHECK DURING THE INITIAL HIRING PROCESS. ONCE ONBOARD, THEY MUST OBTAIN AND RETAIN ANNUAL CJIS CERTIFICATION AS PART OF THE ONGOING EMPLOYMENT PROCESS. * 7 YEAR STANDARD BACKGROUND CHECK & CREDIT HISTORY CHECK * DRIVING RECORD (MVR) * 10-PANEL DRUG SCREEN ## Description SCOPE: THIS POSITION WILL SERVE AS A SIEM ENGINEER WITHIN THE DEPARTMENT OF ADMINISTRATIONS DIVISION OF INFORMATION SECURITY. THE SUCCESSFUL CANDIDATE WILL SHOW EXTENSIVE EXPERIENCE SUCCESSFULLY DESIGNING, IMPLEMENTING, MAINTAINING AND OPTIMIZING PALO ALTO CORTEX XSIAM AND CORTEX XDR IN LARGE-SCALE, MULTI-TENANT SECURITY ENVIRONMENTS. THIS CONTRACTOR WILL WORK WITH A LARGE ENTERPRISE SECURITY TEAM AND A 24X7 SECURITY OPERATIONS CENTER (SOC), ASSISTING FULL-TIME SECURITY ARCHITECTS, ENGINEERS AND ANALYSTS WITH THE DESIGN, IMPLEMENTATION, INTEGRATION AND CONTINUOUS IMPROVEMENT OF SIEM, XDR, DETECTION AND RESPONSE CAPABILITIES SUPPORTING MULTIPLE STATE AGENCIES., THIS POSITION IS 100% REMOTE AND WILL PARTICIPATE IN A MONTHLY ON-CALL ROTATION SUPPORTING A 24X7 SECURITY OPERATIONS CENTER SERVING MULT ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 166: Sycophancy, Zip bombs and AI Native Development](https://www.wearedevelopers.com/magazine/585-dev-digest-166-sycophancy-zip-bombs-and-ai-native-development) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)