Remote Senior SIEM/XDR Engineer — Cortex/XSIAM Expert

US Tech Solutions, Inc.; Columbia (SC); Remote; USD 120,000 - 180,000; Full time

Job summary

US Tech Solutions, Inc. is seeking a remote, highly skilled SIEM/XDR engineer to lead design, deployment, and operational support of Cortex XSIAM and Cortex XDR across multi-tenant environments.

You will implement detection engineering, analytics, dashboards and automation to enhance incident response. You will collaborate with security architects, engineers and stakeholders to ensure alignment with regulatory requirements and business goals.

Qualifications

• Bachelor's degree in an information technology or information security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Five years of experience in supporting large IT environments and/or system deployments.

Responsibilities

• Assist in planning, design, deployment, administration and support of enterprise SIEM and XDR capabilities.
• Engineer and troubleshoot Palo Alto Cortex XSIAM and Cortex XDR platforms.
• Onboard multiple tenants with role-based access and data segregation; manage dashboards and reporting.
• Develop, test, deploy and maintain automated response workflows and playbooks for enrichment, triage, containment and incident response.
• Create runbooks, SOPs, diagrams and data-flow documentation.
• Support SOC analysts from Tier 1 to Tier 3 with platform troubleshooting and threat-hunting support.

Skills

Palo Alto Cortex XSIAM

Cortex XDR design

SIEM for multi-tenant

Cribl data modeling

Automation: Python/Bash

Threat hunting & analytics

Education

Bachelor's in IT or Info Security

Eight years experience substitution

Tools

Palo Alto Cortex

Cribl

Job description

US Tech Solutions, Inc. is seeking a remote, highly skilled SIEM/XDR engineer to lead design, deployment, and operational support of Cortex XSIAM and Cortex XDR across multi-tenant environments.

You will implement detection engineering, analytics, dashboards and automation to enhance incident response. You will collaborate with security architects, engineers and stakeholders to ensure alignment with regulatory requirements and business goals.