[Hiring] Security Architect - Consultant - SIEM Engineer @Serigor

Role Description

This Position Will Serve as a Siem Engineer Within the Client. The Candidate Will Show Extensive Experience Successfully Designing, Implementing, Maintaining and Optimizing PALO ALTO Cortex Xsiam and Cortex XDR in Large-Scale, Multi-Tenant Security Environments. This Contractor Will Work with a Large Enterprise Security Team and A 24x7 Security Operations Center (Soc), Assisting Full-Time Security Architects, Engineers and Analysts with the Design, Implementation, Integration and Continuous Improvement of SIEM, XDR, Detection and Response Capabilities Supporting Multiple State Agencies.

Successful Candidate:

• This contractor will be primarily focused on Cortex XSIAM and Cortex XDR engineering, administration, detection content, automation and operational support.
• Providing important secondary support for CRIBL data Modeling, log pipeline design, parsing, normalization, enrichment and ingestion.
• Hands-on experience supporting both security engineering and SOC operations, including:
• Multi-tenant onboarding
• Tenant-specific configurations
• Access controls
• Data separation
• Integrations
• Dashboards
• Reporting
• Incident response
• Threat hunting
• Playbooks
• Runbooks
• Standard operating procedures
• Analyst enablement
• Support strategic planning, solution design, implementation, troubleshooting, performance optimization and continuous improvement of secure systems and services.

Qualifications

• Hands-On Palo Alto Cortex Xsiam And Cortex Xdr Design, Implementation, Administration And Operational Support.
• Experience Engineering And Supporting Siem Capabilities For Multi-Tenant Environments And 24x7 Security Operations Center Operations.
• Experience Developing And Tuning Detections, Correlation Rules, Analytics, Threat-Hunting Queries, Dashboards, Reporting And Alert Suppression Logic.
• Strong Experience Creating And Managing Complex Playbooks.
• Cribl Data Modeling, Log Pipeline Design, Parsing, Normalization, Enrichment, Routing And Ingestion.
• Experience Developing Automation, Integrations, Playbooks And Response Workflows Using Scripting Languages Such As Python And Bash.
• Experience Onboarding And Troubleshooting Telemetry From Cloud, Endpoint, Network, Identity, Saas, Linux, Windows And Custom Application Sources.
• Strong Understanding Of Enterprise Security Architecture, Incident Response, Networking, Access Control, Secure System Design And Industry-Standard Cybersecurity Frameworks.

Requirements

• Bachelor's Degree In An Information Technology Or Information Security Related Field.
• Eight Years Of Relevant Work Experience May Be Substituted In Lieu Of Education.
• Five Years Of Experience In Supporting Large IT Environments And/Or System Deployments.

Additional Skills & Duties

• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks.
• Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs.

Preferred Education/Certifications

• CISSP, Security+ Or GIAC Certification.
• Palo Alto Cortex, Cribl Or Other Relevant SIEM/Security Platform Certification.