Security Engineer

Job Summary:We are seeking a skilled Cortex XSIAM SME / Engineer to join our team. The ideal candidate will have extensive experience in implementing and configuring Cortex XSIAM solutions, with a strong focus on deployment, data onboarding, and integration with existing enterprise tools. This role requires a deep understanding of security operations, cloud environments, and network protocols.
Responsibilities:Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.Troubleshooting: Resolve data ingestion gaps, agent errors, and manage alert false positives to maintain system integrity.
Mandatory Skills:3+ years of experience in SIEM, XDR, or SOC operations.Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.Strong knowledge of log parsing, regular expressions, and query languages (such as XQL).Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.Good understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.Proficiency in Cortex XSOAR is a deal breaker for this role.
Preferred Skills:Palo Alto Networks Certified Cortex XSIAM Analyst or Engineer certifications.Experience with automation and orchestration in security operations.Knowledge of incident response processes and methodologies.