Remote Security Architect - SIEM/XDR & 24x7 SOC (Contract)

Novalink Solutions LLC; West Columbia (TX); A distancia; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

Novalink Solutions LLC is seeking a Security Architect - Consultant for a fully remote, 1-year contract. You will lead planning, design, deployment and operations of enterprise SIEM/XDR capabilities for a 24x7 SOC serving multiple agencies and tenants.

The role requires extensive experience with Cortex XSIAM/XDR, Cribl and automation using Python/Bash, plus strong incident response and security architecture. CJIS and background checks are required during hiring.

Formación

• Bachelor's degree in IT or information security or equivalent experience.
• 8+ years in IT or security, with large environments or deployments.
• Experience with Palo Alto Cortex XSIAM and Cortex XDR.
• Experience engineering SIEM in multi-tenant, 24x7 SOC.
• Cribl data modeling, log pipelines, parsing and ingestion.
• Automation using Python and Bash; telemetry troubleshooting.
• Strong security architecture, incident response and frameworks.

Responsabilidades

• Plan, design, deploy and operate enterprise SIEM/XDR capabilities.
• Onboard tenants, configure access, data segregation and dashboards.
• Develop detections, rules, analytics, threat-hunting queries and alerts.
• Manage log pipelines, Cribl modeling and ingestion optimization.
• Create runbooks, SOPs, and knowledge articles for analysts.
• Support SOC analysts through troubleshooting and escalations.

Conocimientos

XSIAM

XDR

SIEM engineering

Cribl

Python

Bash

Incident response

Multi-tenant

Automation

Educación

Bachelor's Degree in IT or InfoSec

Herramientas

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Descripción del empleo

Novalink Solutions LLC is seeking a Security Architect - Consultant for a fully remote, 1-year contract. You will lead planning, design, deployment and operations of enterprise SIEM/XDR capabilities for a 24x7 SOC serving multiple agencies and tenants.

The role requires extensive experience with Cortex XSIAM/XDR, Cribl and automation using Python/Bash, plus strong incident response and security architecture. CJIS and background checks are required during hiring.