Security Architect: SIEM, SOC & Automation Lead

American Business Solutions Inc.; Columbia (SC); On-site; USD 120,000 - 160,000; Full time

Job summary

American Business Solutions Inc. is seeking a senior security engineer with 8+ years in large IT environments and hands-on Cortex XSIAM/XDR design and operations.

You will model Cribl data pipelines, build automation and playbooks, and support multi-tenant SIEM deployments across cloud, endpoints, and networks.

Strong integration, scripting (Python/Bash), and enterprise security architecture knowledge are required.

Qualifications

• Bachelor's degree in IT or InfoSec; 8+ years of relevant work may substitute education
• 5+ years supporting large IT environments or deployments
• Design/implement/administrate Palo Alto Cortex XSIAM and Cortex XDR
• SIEM capabilities for multi-tenant environments and 24x7 SOC operations
• Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing and ingestion
• Automation, integrations, playbooks and response workflows with Python/Bash
• Telemetry onboarding/troubleshooting from cloud, endpoint, network, identity, SaaS, Linux/Windows/custom apps
• Enterprise security architecture, incident response, networking, access control, secure system design, cybersecurity frameworks

Skills

Bachelor's Degree in IT/InfoSec

5+ years large IT environments

Cortex XSIAM/XDR design

SIEM in multi-tenant env

Cribl data modeling

Automation & playbooks (Python/Bash)

Telemetry onboarding (cloud/endpoint)

Enterprise security architecture

Education

Bachelor's Degree in Information Technology or Information Security related field

Tools

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Job description

American Business Solutions Inc. is seeking a senior security engineer with 8+ years in large IT environments and hands-on Cortex XSIAM/XDR design and operations.

You will model Cribl data pipelines, build automation and playbooks, and support multi-tenant SIEM deployments across cloud, endpoints, and networks.

Strong integration, scripting (Python/Bash), and enterprise security architecture knowledge are required.