Remote Cortex XSIAM SIEM Engineer | SOC & Automation

SUNSHINE ENTERPRISE USA LLC; United States; Remote; USD 140.000 - 190.000; Teilzeit

Benefits dieser Stelle

Remote work

Zusammenfassung

SUNSHINE ENTERPRISE USA LLC seeks a Senior SIEM Engineer to design, implement, and operationalize Palo Alto Cortex XSIAM and Cortex XDR in a large-scale, multi-tenant environment. You will work with enterprise security architects and a 24x7 SOC team on detection engineering, automation, and incident response.

The role supports Cribl data pipelines and telemetry onboarding across cloud, endpoint, network, and apps, with remote-first flexibility and occasional onsite meetings as needed.

Qualifikationen

• Hands-on experience with Palo Alto Cortex XSIAM/XDR architecture, implementation, administration, and operational support.
• Experience supporting enterprise SIEM platforms within large multi-tenant environments.
• Experience supporting 24x7 Security Operations Centers (SOC).
• Strong detection engineering including: correlation rules, threat hunting, analytics, dashboards, alert tuning, false-positive reduction.
• Hands-on Cribl administration including data modeling, log pipeline design, parsing, normalization, enrichment, routing, ingestion.
• Experience developing automation using Python and Bash.
• Experience onboarding telemetry from cloud, endpoint, network, identity, SaaS, Windows, Linux, and custom applications.
• Knowledge of enterprise security architecture, incident response, secure system design, networking, IAM, and cybersecurity frameworks.

Aufgaben

• Design, implement, configure, and maintain Cortex XSIAM and Cortex XDR platforms.
• Support multi-tenant SIEM environments, tenant onboarding, RBAC, data segregation, dashboards, and reporting.
• Develop and optimize detection rules, correlation, analytics, threat hunting queries, and alert logic.
• Design and manage Cribl log pipelines with data modeling, parsing, normalization, enrichment, routing.
• Integrate telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom apps.
• Develop and maintain automated playbooks and response workflows using Python and Bash.
• Support incident response, threat hunting, and SOC operations.
• Create Runbooks, SOPs, architecture diagrams, data flow docs, and knowledge articles.

Kenntnisse

Palo Alto Cortex XSIAM

Palo Alto Cortex XDR

Cribl

Python

Bash

SIEM platforms

Cloud telemetry onboarding

Ausbildung

Bachelor's degree in Information Technology, Information Security, Computer Science, or related field

Tools

Palo Alto Cortex XSIAM

Palo Alto Cortex XDR

Cribl

Python

Bash

Versatile SIEM environments

Jobbeschreibung

SUNSHINE ENTERPRISE USA LLC seeks a Senior SIEM Engineer to design, implement, and operationalize Palo Alto Cortex XSIAM and Cortex XDR in a large-scale, multi-tenant environment. You will work with enterprise security architects and a 24x7 SOC team on detection engineering, automation, and incident response.

The role supports Cribl data pipelines and telemetry onboarding across cloud, endpoint, network, and apps, with remote-first flexibility and occasional onsite meetings as needed.