Remote Security Architect - SIEM/XDR Engineer

Intellibee; South Carolina; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Long-Term Stability

Comprehensive Health Coverage

401(k) program

Green Card assistance

Job summary

IntelliBee seeks a Security Architect - Consultant - SIEM Engineer to plan, design, deploy and support enterprise SIEM and XDR capabilities remotely in the US. Responsibilities include platform engineering, multi-tenant onboarding, detection engineering and runbook creation.

Required skills include Cribl modeling, Cortex XSIAM, XDR, and automation using Python/Bash, plus experience with telemetry from cloud and endpoints. Strong security architecture knowledge is essential.

Qualifications

• Bachelor’s degree in Information Technology or Information Security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Experience with large IT environments or system deployments is required.

Responsibilities

• Plan, design, deploy and operate enterprise SIEM and XDR capabilities.
• Engineer and optimize Palo Alto Cortex XSIAM/XDR platforms.
• Develop automated playbooks and integrations using Python or Bash.
• Onboard telemetry from cloud, endpoint, network, identity, SaaS and custom apps.
• Create runbooks, SOPs, diagrams and data-flow documentation.
• Monitor ingestion health, platform availability and alert volumes.

Skills

SIEM engineering

Cortex XSIAM

Cortex XDR

Log pipeline design

Cribl data modeling

Automation scripts

Threat hunting

Incident response

Security architectures

Access control

Education

Bachelor's degree in IT or Security

Eight years of relevant experience

Tools

Cribl

Cortex XSIAM

Cortex XDR

SIEM platforms

Job description

IntelliBee seeks a Security Architect - Consultant - SIEM Engineer to plan, design, deploy and support enterprise SIEM and XDR capabilities remotely in the US. Responsibilities include platform engineering, multi-tenant onboarding, detection engineering and runbook creation.

Required skills include Cribl modeling, Cortex XSIAM, XDR, and automation using Python/Bash, plus experience with telemetry from cloud and endpoints. Strong security architecture knowledge is essential.