Security Architect- SIEM Engineer

· HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.

· Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.

· CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.

· Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.

· Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.

· Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry- standard cybersecurity frameworks.

preferred:

ADDITIONAL SKILLS & DUTIES:

· Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.

· Strong experience creating and managing complex playbooks

· Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.

· Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs