Cortex XSIAM SME

Wipro; Dallas (TX); On-site; USD 60,000 - 135,000; Full time

Benefits offered by this job

Medical and dental benefits

Disability insurance

Paid time off

Equal opportunity employer

Job summary

Wipro is seeking a Cortex XSIAM Specialist to join our security engineering team in the United States. You will own end-to-end log onboarding, data modeling, and detection content for Cortex XSIAM, working across endpoints, networks, and clouds.

You will craft XQL-based detections, tune alerts, and build dashboards while aligning with MITRE ATT&CK. Strong collaboration with customers and stakeholders is essential for improving visibility and threat detection.

Qualifications

• 5–8 years of experience in security operations and SIEM engineering.
• Hands-on deployment and management of SIEM and SOAR in enterprise environments.
• Experience onboarding log sources and integrating into Cortex XSIAM.
• Proficiency in XSIAM data models, enrichment, and normalization.
• Expertise crafting detection content with XQL and building dashboards.
• Understanding of MITRE ATT&CK and related security frameworks.
• Familiarity with other SIEMs (Splunk, QRadar) and XSIAM architecture.

Responsibilities

• Collaborate to define a robust Cortex XSIAM log ingestion strategy using Broker VMs and Collectors.
• Serve as Security Analyst and SIEM Engineer, from onboarding to detection content development.
• Design and implement XQL-based correlation rules across endpoints, network, and cloud.
• Create and manage data models to normalize telemetry per Cortex XSIAM schema.
• Build operational dashboards and visualizations to show threat posture and coverage.
• Act as SME for log ingestion, correlation logic, and alert tuning.
• Engage with customers to assess environments and recommend log onboarding strategies.
• Monitor and optimize ingestion pipelines; fine-tune alerts to reduce noise.

Skills

Communication skills

SIEM & SOAR deployment

Cortex XSIAM expertise

XSIAM data models & normalization

XQL query language

XDR endpoint integration

Log onboarding & ingestion

Regex & JSON parsing

Dashboard development

MITRE ATT&CK alignment

Education

Bachelor’s degree in Computer Science or related field

Palo Alto Networks XSIAM certification (Engineer/Analyst/EDU-270)

Tools

Broker VMs

XSIAM Collectors

Palo Alto Cortex XSIAM

Splunk

QRadar

Job description

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future‑ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever‑changing world. For additional information, visit us at www.wipro.com.

Job Description

Title: Cortex XSIAM

Duration; Full Time

Experience / Qualifications – Cortex XSIAM

• Exceptional written and verbal communication and presentation skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.
• hands‑on experience deploying and managing SIEM and SOAR solutions in large‑scale enterprise environments, including direct experience with Palo Alto Networks Cortex XSIAM.
• Proven expertise in onboarding log sources and integrating them into Cortex XSIAM using Broker VMs, XDR Collectors, and custom ingestion methods.
• Proficient in developing and managing XSIAM Data Models, including field mapping, enrichment, normalization, and schema standardization across multiple data sources.
• Strong experience crafting and optimizing detection logic using XQL (XSIAM Query Language) to build high‑fidelity correlation rules, dashboards, and proactive threat hunting queries.
• Solid understanding of Palo Alto XDR endpoint integration, sensor health monitoring, and policy tuning for enhanced endpoint visibility.
• Experienced in event collection strategy, log onboarding, log tuning, and normalization to ensure high‑quality and actionable data within the XSIAM platform.
• Demonstrated ability to translate security monitoring requirements into use cases and actionable detection content, aligned with MITRE ATT&CK and industry best practices.
• Familiarity with broader SIEM technologies (e.g.Splunk, IBM QRadar) and how they compare/contrast with Cortex XSIAM architecture and capabilities.
• Strong grasp of security operations workflows, alert triage, threat detection, incident response, and automation within XSIAM.
• Hands‑on experience creating and managing security dashboards and visualizations to provide meaningful insights for SOC teams and leadership.
• Expertise in Regular Expressions (Regex), JSON parsing, and log analysis to derive context‑rich detection strategies.
• Working knowledge of generating performance and health reports across log source status, ingestion rates, data pipeline performance, and detection coverage.
• Relevant certifications (e.g., Palo Alto Networks Certified XSIAM Engineer or XSIAM Analyst or XSIAM EDU-270). Bachelor’s degree in computer science, Information Security, or related field is a plus.

Activities / Responsibilities – Cortex XSIAM

• Collaborate with technical leads and stakeholders to define and execute a robust log ingestion strategy for Cortex XSIAM using Broker VMs and Collectors.
• Serve as both a Security Analyst and SIEM Engineer, owning end‑to‑end workflows from data onboarding to detection content development and incident response support.
• Design and implement XQL‑based correlation rules to detect and alert on suspicious behavior across endpoint, network, and cloud environments.
• Create, tune, and manage data models to normalize and enrich telemetry data in alignment with Cortex XSIAM’s schema requirements.
• Build operational dashboards using XQL that provide actionable insights into threat posture, detection efficacy, and log source coverage.
• Act as SME for XSIAM log ingestion processes, correlation logic, alert tuning, and detection strategy development.
• Engage directly with end customers to assess their environment, identify visibility gaps, and provide strategic recommendations for log onboarding and threat coverage.
• Monitor, optimize, and troubleshoot log source ingestion pipelines and Collector/Broker VM performance.
• Fine‑tune alerts and detections to minimize false positives and improve SOC analyst efficiency.

Areas of responsibility

Monitoring and Incident Detection‑Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis‑Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics‑Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance‑“Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance.”

Training and Awareness‑Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

Mandatory Skills: Security Information Event Management.Experience: 5-8 Years.The expected compensation for this role ranges from $60,000 to $135,000 .Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.Reinvent your world. We are building a modern Wipro. We are an end‑to‑end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.

If you encounter any suspicious mail, advertisements, or persons who offer jobs at Wipro, please email us at [e-mail] . Do not email your resume to this ID as it is not monitored for resumes and career applications.

Any complaints or concerns regarding unethical/unfair hiring practices should be directed to our Ombuds Group at [e-mail] .

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.