Remote Senior SIEM Engineer - Cortex XSIAM/XDR Expert

CAI; Boise (ID); Remote; USD 96,000 - 110,000; Full time

Job summary

CAI is hiring a Senior SIEM Engineer for a fully remote, full-time contract role in the United States. You will design, implement, and optimize Palo Alto Cortex XSIAM and Cortex XDR within a large-scale 24x7 SOC, handling detection engineering, security automation, threat hunting, and incident response support.

You will configure tenants, RBAC, and data segregation, develop detection content and playbooks, and manage Cribl log pipelines.

Qualifications

• Hands-on experience designing, implementing, administering, and supporting Cortex XSIAM and Cortex XDR.
• Experience supporting SIEM in large-scale, multi-tenant environments and 24x7 SOC operations.
• Background in detection engineering, threat hunting, and alert tuning.
• Experience creating security automation, playbooks, and response workflows.
• Cribl data modeling, log pipeline design, parsing, normalization, and ingestion.
• Integrations and automation using Python and Bash.
• Telemetry sources across cloud, endpoints, network, identity, SaaS, Linux, Windows, and custom apps.
• Strong enterprise security architecture, incident response, networking, and cybersecurity frameworks.
• Bachelor's degree or equivalent experience; CJIS background check capability.

Responsibilities

• Design, implement, administer, and optimize Cortex XSIAM and Cortex XDR platforms.
• Support SIEM and XDR operations in a multi-tenant SOC environment.
• Configure tenant onboarding, RBAC, data segregation, dashboards, and integrations.
• Develop and tune detection content, rules, analytics, and watchlists.
• Design and maintain security automation, playbooks, and incident workflows.
• Support Cribl log management: data modeling, pipelines, parsing, enrichment, routing.
• Integrate platforms with ticketing, identity, and threat intel systems.
• Monitor health, ingestion performance, alert volumes, and coverage.
• Troubleshoot complex platform issues; assist Tier 1-3 SOC analysts.
• Create runbooks, SOPs, diagrams, and knowledge articles.
• Participate in monthly on-call rotation for a 24x7 SOC.

Skills

Cortex XSIAM

Cortex XDR

Cribl

Python

Bash

SIEM design

Threat hunting

Incident response

Log pipeline

Automation

Education

Bachelor's degree in IT or InfoSec

Tools

Cribl

Job description

CAI is hiring a Senior SIEM Engineer for a fully remote, full-time contract role in the United States. You will design, implement, and optimize Palo Alto Cortex XSIAM and Cortex XDR within a large-scale 24x7 SOC, handling detection engineering, security automation, threat hunting, and incident response support.

You will configure tenants, RBAC, and data segregation, develop detection content and playbooks, and manage Cribl log pipelines.