Remote Senior Cortex XSIAM/XDR Engineer

CAI; City of Albany (NY); Remote; USD 96,000 - 110,000; Full time

Job summary

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR and Cribl in a large-scale, multi-tenant 24x7 SOC environment, with expertise in detection engineering, security automation, threat hunting, log pipeline management, and incident response support.

The Senior SIEM Engineer will be responsible for hands-on design, configuration, and operation across SIEM/XDR platforms, with remote, full-time contract work.

Qualifications

• Hands-on experience designing, implementing, administering, and supporting Palo Alto Cortex XSIAM and Cortex XDR.
• Experience supporting SIEM platforms within large-scale, multi-tenant environments and 24x7 SOC operations.
• Strong background in detection engineering, threat hunting, correlation rule development, alert tuning, dashboards, and reporting.
• Experience creating and managing security automation, playbooks, and response workflows.
• Hands-on experience with Cribl, including data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
• Experience developing integrations and automation using Python and Bash.

Responsibilities

• Design, implement, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms.
• Support enterprise SIEM and XDR operations within a large-scale, multi-tenant security environment.
• Configure tenant onboarding, RBAC, data segregation, dashboards, reporting, and platform integrations.
• Develop and tune detection content, correlation rules, analytics, threat-hunting queries, watchlists, and alert suppression logic.
• Design and maintain security automation, playbooks, and incident response workflows.
• Support Cribl log management, including data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
• Integrate security platforms with ticketing, case management, notification, identity, and threat intelligence systems.
• Monitor platform health, ingestion performance, alert volumes, detection coverage, and operational metrics.
• Troubleshoot complex security platform issues and support Tier 1-3 SOC analysts during investigations and incident response activities.
• Create and maintain runbooks, SOPs, architecture diagrams, technical documentation, and knowledge articles.
• Participate in a monthly on-call rotation supporting a 24x7 SOC.
• Collaborate with security architects, engineers, analysts, and stakeholders to continuously improve security operations and services.

Skills

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

SIEM

Python

Bash

Incident response

Detection engineering

Education

Bachelor's degree in Information Technology, Information Security, or related field

Tools

Cribl

Palo Alto Cortex XSIAM

Cortex XDR

Job description

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR and Cribl in a large-scale, multi-tenant 24x7 SOC environment, with expertise in detection engineering, security automation, threat hunting, log pipeline management, and incident response support.

The Senior SIEM Engineer will be responsible for hands-on design, configuration, and operation across SIEM/XDR platforms, with remote, full-time contract work.