SIEM Engineer

Responsibilities: Design, deploy, and optimize Palo Alto Cortex XSIAM and XDR platforms within a multi-tenant public sector environment. Manage security log pipelines using Cribl and develop automated response playbooks to support 24x7 SOC operations.

Requirements: Requires 5+ years of experience in enterprise IT with deep expertise in Cortex XSIAM/XDR and Cribl data modeling. A bachelor's degree in IT/Security is required, though 8+ years of experience may substitute.

Key skills: Palo Alto Cortex XSIAM, Palo Alto Cortex XDR, Cribl, SIEM Engineering, Detection Engineering, Python, Bash, Log Management, Incident Response, Multi-tenant Architecture, SOC Operations, RBAC, Threat Hunting, Automation Playbooks, Data Modeling, Security Architecture

Keywords: Palo Alto Cortex XSIAM, Cortex XDR, Cribl, SIEM, SOC, Python, Bash, Detection Engineering, Log Pipeline, Multi-tenant, CJIS, CISSP, Security+, GIAC, Incident Response, Threat Hunting, RBAC, SOP, Runbooks, Cloud Security, Endpoint Security, Telemetry, Data Normalization, Public Sector, Cybersecurity Architecture