SIEM/ SOAR Engineer

Summary

We are seeking an experienced Cortex XSIAM Engineer to join our cybersecurity team. This role is pivotal in deploying, managing, and optimizing our Cortex XSIAM environment to enhance our security operations. The ideal candidate will have a strong background in cybersecurity analytics and be adept at using Palo Alto Networks technologies.

Responsibilities

• Deploy, configure, and manage Cortex XSIAM, focusing on data lake, analytics, and automation.
• Onboard and integrate logs and telemetry from various platforms including Cortex XDR, NGFW, Prisma Cloud, O365, AWS, Azure, GCP, Okta, and CrowdStrike.
• Ensure data quality, ingestion health, and system performance are maintained.
• Develop and fine-tune XQL detections, correlation rules, and behavioral analytics in alignment with MITRE ATT&CK framework.
• Build and enhance Cortex XSOAR playbooks and automated workflows for robust automation and integration.