Senior Cortex XSIAM SME Engineer

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; On-site; CAD 90,000 - 120,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a skilled cybersecurity professional to administer and optimize security platforms across on-premises and cloud environments.

You will monitor, diagnose, and resolve platform issues while expanding detections, analytics, and automation to enhance threat detection and incident response. The role emphasizes integration of diverse security tools, AWS cloud security, and AI-enabled security initiatives, with a focus on continuous improvement and strong technical

Qualifications

• Hands-on experience with leading cybersecurity platforms and cloud security technologies.
• Experience with security data sources integration, APIs, and endpoint agents.

Responsibilities

• Administer, maintain, and support security platforms.
• Monitor platform health and investigate operational issues.
• Trouble shoot and resolve integration, configuration, and endpoint agent issues.
• Develop, test, deploy, and maintain detections and analytics use cases.
• Identify automation opportunities to improve efficiency and analyst productivity.
• Support AI-enabled security initiatives and cloud security integrations.
• Assist with cloud security controls, monitoring solutions, and AWS integrations.
• Develop and maintain technical documentation and runbooks.
• Participate in security testing, audits, and knowledge transfer while mentoring teammates.

Skills

SIEM

Log management

Security monitoring

Threat detection

Incident analysis

Automation

Scripting

Cloud security

AI security concepts

Documentation

Tools

Palo Alto Cortex XSIAM/XDR

Wiz

Microsoft Defender

Trellix

Rapid7

RedSeal

AWS

Job description

• Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.
• Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.
• Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.
• Proficiency in automation, scripting workflow optimization within Security Operations environments.
• Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.
• Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

• Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.
• Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.
• Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.
• Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.
• Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.
• Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.
• Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.
• Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.
• Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.
• Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.