Remote SIEM Engineer — Cortex XSIAM/XDR Expert

Cornerstonetechtalent; Columbia (SC); Remote; USD 120,000 - 160,000; Full time

Job summary

CornerStone TTS seeks a SIEM Engineer with hands-on Palo Alto Cortex XSIAM and Cortex XDR experience to support a 24x7 SOC for a South Carolina state agency client. This 12-month remote contract offers full-time engagement and a chance to architect and operate a multi-tenant SIEM/XDR platform.

You will onboard tenants, manage access controls, detections and correlations, conduct threat hunting, and craft dashboards and automation playbooks in Python/Bash, leveraging Cribl log pipelines to

Qualifications

• Bachelor's degree in IT or Information Security, or 8+ years of relevant work substituting education.
• Extensive experience with Palo Alto Cortex XSIAM/XDR design, implementation and operations.
• Proven track record in multi-tenant SIEM environments and SOC operations.
• Strong scripting in Python and Bash for automation and playbooks.

Responsibilities

• Engineer and support a 24x7 multi-tenant SIEM/XDR platform.
• Onboard tenants, manage access controls, detections and correlation rules.
• Develop threat hunting workflows, dashboards and automation playbooks.
• Build and maintain Cribl log pipelines for ingestion and enrichment.

Skills

Palo Alto Cortex XSIAM

Palo Alto Cortex XDR

SIEM

Cribl

Python

Bash

Automation

Threat hunting

Log pipelines

Telemetry onboarding

Education

Bachelor's degree in IT or Information Security

Tools

Cribl

Job description

CornerStone TTS seeks a SIEM Engineer with hands-on Palo Alto Cortex XSIAM and Cortex XDR experience to support a 24x7 SOC for a South Carolina state agency client. This 12-month remote contract offers full-time engagement and a chance to architect and operate a multi-tenant SIEM/XDR platform.

You will onboard tenants, manage access controls, detections and correlations, conduct threat hunting, and craft dashboards and automation playbooks in Python/Bash, leveraging Cribl log pipelines to