> Markdown version of [/jobs/ext/4585705-palo-alto-cortex-xsiam-xdr-architect](https://www.wearedevelopers.com/jobs/ext/4585705-palo-alto-cortex-xsiam-xdr-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Palo Alto Cortex XSIAM / XDR Architect

- **Company:** Symbioun Technologies, Inc
- **Location:** United States
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** ARM Architecture, Bash Shell, CompTIA Security+, Cyber Security, Python (Programming Language), Parsing, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, Data Pipelines
- **Published:** November 5, 2026
- **Apply:** https://www.dice.com/job-detail/7d404016-77b4-4924-8023-9953d21bc9bf

## About the Role

We are looking for an experienced Security Engineer with strong hands-on expertise in Palo Alto Cortex XSIAM and Cortex XDR, along with secondary experience in Cribl for security data pipelines and log management., * Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR engineering, implementation, administration, and troubleshooting.

 * Experience with SIEM engineering, multi-tenant environments, and 24x7 SOC operations.
 * Strong knowledge of Cribl, including log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
 * Experience developing detection rules, threat-hunting queries, dashboards, and security analytics.
 * Hands-on experience with automation, scripting (Python/Bash), playbooks, and incident response workflows.
 * Experience integrating and onboarding cloud, endpoint, network, identity, and application log sources.
 * Ability to support SOC teams, troubleshoot security platforms, and maintain technical documentation.

Education & Experience:

 * Bachelor's degree in IT, Information Security, or a related field.
 * Minimum 8 years of relevant experience.
 * CISSP, Security+, GIAC, or Palo Alto/Cribl certifications are preferred.