Cortex XSIAM SME

Job Summary

We are looking for a Cortex XSIAM SME with strong cybersecurity and Security Operations experience. The candidate will be responsible for managing and supporting security platforms, monitoring security events, developing detection rules, troubleshooting integrations, and improving security operations through automation.

Key Responsibilities

• Administer and support Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and other security platforms.
• Monitor platform health and troubleshoot configuration, integration, performance, and endpoint agent issues.
• Develop and maintain security detections, correlation rules, analytics, and monitoring use cases.
• Work with SIEM, log management, threat detection, and incident analysis processes.
• Integrate and troubleshoot security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud security services.
• Identify opportunities for automation and workflow improvements within Security Operations.
• Support AWS cloud security, security controls, monitoring, and cloud integrations.
• Support security technology upgrades, patching, maintenance, and lifecycle management.
• Assist with AI-enabled security initiatives and security analytics.
• Create and maintain technical documentation, architecture diagrams, procedures, standards, and runbooks.
• Participate in cybersecurity testing, audits, knowledge transfer, and continuous improvement activities.
• Provide technical guidance and mentoring to other team members.

Required Skills

• Strong hands-on experience with Palo Alto Cortex XSIAM/XDR.
• Experience with Wiz, Microsoft Defender, Trellix, Rapid7, and RedSeal.
• Strong understanding of SIEM, log management, security monitoring, threat detection, and incident analysis.
• Experience with security integrations, APIs, endpoint agents, and cloud security technologies.
• Scripting and automation experience in a Security Operations/SOC environment.
• Good knowledge of AWS and cloud security.
• Understanding of cybersecurity frameworks, compliance, security analytics, and AI security concepts.
• Strong troubleshooting, documentation, and communication skills.