Cortex XSIAM SME- 100% onsite in Calgary

Role: Cortex XSIAM SME

100% onsite- Calgary (8am-5pm)

Required Skill Set

• Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.

• Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.

• Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.

• Proficiency in automation, scripting workflow optimization within Security Operations environments.

• Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.

• Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

• Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.

• Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.

• Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.

• Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.

• Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.

• Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.

• Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.

• Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.

• Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.

• Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.