Remote Senior SIEM Engineer: Cortex XSIAM/XDR

CAI; Dover (DE); Remote; USD 96,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401k retirement account access

Paid time off

Job summary

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR and Cribl in a large-scale, remote, contract role. The position supports a 24x7 SOC and requires strong detection engineering and security automation skills.

You will work in a remote, full-time capacity with responsibilities spanning onboarding, rule development, data modeling, and incident response coordination across enterprise environments.

Qualifications

• Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR.
• Experience supporting SIEM in large-scale, multi-tenant environments and 24x7 SOC operations.
• Proficiency in detection content, correlation rules, analytics, and alert tuning.

Responsibilities

• Design, implement, administer, and optimize Cortex XSIAM/XDR platforms.
• Configure tenant onboarding, RBAC, data segregation, dashboards, reporting, and integrations.
• Develop and tune detection content, rules, analytics, and threat-hunting queries.
• Create security automation, playbooks, and incident response workflows.
• Support Cribl log management, including data modeling and ingestion.
• Integrate security platforms with ticketing, identity, and threat intel systems.
• Monitor platform health, ingestion performance, and alert volumes.
• Troubleshoot complex issues and assist SOC analysts during investigations.
• Create runbooks, SOPs, and architectural diagrams.
• Participate in monthly on-call rotation for 24x7 SOC operations.
• Collaborate with security architects and engineers to improve operations.

Skills

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Python

Bash

Threat hunting

Detection engineering

Incident response

Data modeling

Security automation

Education

Bachelor's degree in Information Technology, Information Security, or a related field

Job description

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR and Cribl in a large-scale, remote, contract role. The position supports a 24x7 SOC and requires strong detection engineering and security automation skills.

You will work in a remote, full-time capacity with responsibilities spanning onboarding, rule development, data modeling, and incident response coordination across enterprise environments.