Remote Senior SIEM Engineer: Cortex XSIAM/XDR Expert

CAI; Denver (CO); Remote; USD 96,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k retirement account access

Job summary

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR in a large-scale, multi-tenant SOC environment. The role emphasizes detection engineering, security automation, threat hunting, and incident response support.

The position is full-time, remote, and contract-based, offering exposure to enterprise SIEM/XDR operations and integration work across cloud, endpoints, and networks.

Qualifications

• Hands-on experience designing, implementing, administering, and supporting Palo Alto Cortex XSIAM and Cortex XDR.
• Experience supporting SIEM platforms within large-scale, multi-tenant environments and 24x7 SOC operations.
• Experience developing integrations and automation using Python and Bash.
• Experience onboarding and troubleshooting telemetry sources across cloud, endpoints, networks, SaaS, Linux, Windows.

Responsibilities

• Design, implement, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms.
• Support enterprise SIEM and XDR operations in a large-scale, multi-tenant SOC environment.
• Configure tenant onboarding, RBAC, data segregation, dashboards, reporting, and platform integrations.
• Develop and tune detection content, rules, analytics, and alert logic.

Skills

Detection engineering

Threat hunting

Security automation

Incident response

Education

Bachelor's degree in Information Technology or Information Security

Tools

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Python

Bash

Job description

CAI is seeking a Senior SIEM Engineer to design, implement, and optimize Palo Alto Cortex XSIAM/XDR in a large-scale, multi-tenant SOC environment. The role emphasizes detection engineering, security automation, threat hunting, and incident response support.

The position is full-time, remote, and contract-based, offering exposure to enterprise SIEM/XDR operations and integration work across cloud, endpoints, and networks.