SIEM/ SOAR Engineer

SIA Innovations Inc.; Montreal; In loco; CAD 95.000 - 130.000; Tempo pieno

Descrizione del lavoro

SIA Innovations Inc. is seeking an experienced Cortex XSIAM Engineer to join our cybersecurity team in Montreal. The role focuses on deploying, managing, and optimizing our Cortex XSIAM environment to strengthen security operations and detection coverage.

The ideal candidate has hands-on experience with Cortex XSIAM, SIEM/SOAR, and XQL/Python/REST APIs, and a solid understanding of cloud telemetry and modern SOC technologies. This is a collaborative, growth‑oriented role within a diverse team.

Competenze

• 5–9 years in SOC engineering or cybersecurity analytics.
• 2+ years hands-on with Cortex XSIAM.
• Strong knowledge of SIEM data pipelines and log normalization.
• Certifications such as PCNSE/GCDA/GIAC are a plus.

Mansioni

• Deploy, configure, and manage Cortex XSIAM with focus on data lake, analytics, and automation.
• Onboard logs and telemetry from Cortex XDR, NGFW, Prisma Cloud, O365, AWS, Azure, GCP, Okta, and CrowdStrike.
• Ensure data quality, ingestion health, and system performance.
• Develop and tune XQL detections and correlation rules.
• Build XSOAR playbooks and automation workflows.
• Integrate APIs and security tools into the XSIAM ecosystem.
• Create dashboards and reports showing detection coverage and platform health.
• Maintain runbooks, diagrams, and engineering docs.

Conoscenze

SOC engineering

SIEM/SOAR

Cortex XSIAM

XQL

Python

JSON

REST APIs

Cloud telemetry

XDR

UEBA

EDR

WAF

CASB

MITRE ATT&CK

Strumenti

Palo Alto Cortex XSIAM

Descrizione del lavoro

Summary

We are seeking an experienced Cortex XSIAM Engineer to join our cybersecurity team. This role is pivotal in deploying, managing, and optimizing our Cortex XSIAM environment to enhance our security operations. The ideal candidate will have a strong background in cybersecurity analytics and be adept at using Palo Alto Networks technologies.

Summary

We are seeking an experienced Cortex XSIAM Engineer to join our cybersecurity team. This role is pivotal in deploying, managing, and optimizing our Cortex XSIAM environment to enhance our security operations. The ideal candidate will have a strong background in cybersecurity analytics and be adept at using Palo Alto Networks technologies.

Responsibilities

• Deploy, configure, and manage Cortex XSIAM, focusing on data lake, analytics, and automation.
• Onboard and integrate logs and telemetry from various platforms including Cortex XDR, NGFW, Prisma Cloud, O365, AWS, Azure, GCP, Okta, and CrowdStrike.
• Ensure data quality, ingestion health, and system performance are maintained.
• Develop and fine-tune XQL detections, correlation rules, and behavioral analytics in alignment with MITRE ATT&CK framework.
• Build and enhance Cortex XSOAR playbooks and automated workflows for robust automation and integration.
• Integrate new APIs and security tools into the XSIAM ecosystem.
• Create dashboards and reports to demonstrate detection coverage, rule performance, and platform health.
• Maintain comprehensive documentation including runbooks, diagrams, and engineering documentation.

Required Skills

• 5-9 years of experience in SOC engineering, SIEM/SOAR, or cybersecurity analytics.
• At least 2 years of hands-on experience with Palo Alto Cortex XSIAM, including deployment, detections, and onboarding.
• Strong knowledge of SIEM pipelines, event correlation, and log normalization.
• Expertise in XQL, Python, JSON, and REST APIs.
• Good understanding of cloud telemetry and modern SOC technologies like XDR, UEBA, EDR, WAF, and CASB.
• Relevant certifications such as PCDRE, PCSAE, PCNSE, GCDA, or other GIAC certifications are preferred.

AT SIA Innovations, we offer more than just a job, we offer the opportunity to be part of a diversified team! We provide a collaborative and innovative work environment, also the opportunity for professional growth.

SIA Innovations adheres to the principles of equal employment. All qualified applications will be given careful consideration without regards to ethnicity, color, religion, gender, sexual orientation or identity, nation origin, age, disability or any other characteristic protected by law.