Cortex XSIAM Security Specialist — Remote

Wipro; Dallas (Luzerne County); Remote; USD 60,000 - 135,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Disability insurance

Paid time off

Job summary

Wipro invites a skilled Cortex XSIAM professional to join our security practice. You will own end-to-end workflows from data onboarding to detection content development and incident response support across endpoint, network, and cloud environments.

You will design XQL-based detections, build data models, and create dashboards to provide actionable insights for SOC teams and leadership while aligning with MITRE ATT&CK and industry best practices.

Qualifications

• Exceptional written and verbal communication and presentation skills.
• Hands-on experience deploying and managing SIEM and SOAR solutions in large-scale enterprise environments.
• Proven expertise in onboarding log sources and integrating them into Cortex XSIAM using Broker VMs, XDR Collectors, and custom ingestion methods.
• Proficient in developing and managing XSIAM Data Models, including field mapping, enrichment, normalization, and schema standardization across multiple data sources.
• Strong experience crafting and optimizing detection logic using XQL to build high-fidelity correlation rules, dashboards, and proactive threat hunting queries.
• Familiarity with Palo Alto XDR endpoint integration, sensor health monitoring, and policy tuning.
• Experienced in event collection strategy, log onboarding, log tuning, and normalization.
• Demonstrated ability to translate security monitoring requirements into use cases and actionable detection content, aligned with MITRE ATT&CK.
• Familiarity with Splunk and IBM QRadar compared to Cortex XSIAM.
• Strong grasp of security operations workflows, alert triage, threat detection, incident response, and automation within XSIAM.
• Hands-on experience creating and managing security dashboards and visualizations.
• Expertise in Regex, JSON parsing, and log analysis.
• Generating performance and health reports across log source status and data pipelines.

Responsibilities

• Collaborate with technical leads to define a robust log ingestion strategy for Cortex XSIAM using Broker VMs and Collectors.
• Serve as both a Security Analyst and SIEM Engineer, owning end-to-end workflows from data onboarding to detection content development.
• Design and implement XQL-based correlation rules to detect and alert across endpoint, network, and cloud environments.
• Create, tune, and manage data models to normalize and enrich telemetry data.
• Build operational dashboards using XQL for threat posture and detection efficacy.
• Act as SME for XSIAM log ingestion processes and detection strategy development.
• Engage with end customers to assess visibility gaps and provide strategic recommendations for log onboarding.
• Monitor and optimize log source ingestion pipelines and Collector/Broker VM performance.
• Fine-tune alerts and detections to reduce false positives and boost SOC efficiency.

Skills

Communication

Verbal skills

Presentation

SIEM

SOAR

XQL

Regex

JSON parsing

Threat hunting

Data modeling

Log onboarding

Log ingestion

Endpoint integration

Mitre ATT&CK

Dashboarding

Incident response

SOC workflows

Education

Bachelor's degree in CS/InfoSec

Tools

Broker VM

XDR Collectors

Cortex XSIAM

Splunk

IBM QRadar

Job description

Wipro invites a skilled Cortex XSIAM professional to join our security practice. You will own end-to-end workflows from data onboarding to detection content development and incident response support across endpoint, network, and cloud environments.

You will design XQL-based detections, build data models, and create dashboards to provide actionable insights for SOC teams and leadership while aligning with MITRE ATT&CK and industry best practices.