> Markdown version of [/jobs/ext/4584044-security-architect-siem-engineer](https://www.wearedevelopers.com/jobs/ext/4584044-security-architect-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect- SIEM Engineer - **Company:** Refulgent Technologies Inc. - **Location:** United States (Remote available) - **Contract:** Contract - **Skills:** Microsoft Windows, ARM Architecture, Bash Shell, Software as a Service, Cloud Computing, Linux, Python (Programming Language), Routing, Parsing, Runbook, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, 3-tier Architectures - **Published:** November 5, 2026 - **Apply:** https://www.dice.com/job-detail/1de7275c-2301-4624-8445-752ce6038b6a ## About the Role · HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT. · Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations. · CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION. · Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash. · Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources. · Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry- standard cybersecurity frameworks. preferred: ADDITIONAL SKILLS & DUTIES: · Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic. · Strong experience creating and managing complex playbooks · Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation. · Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs