Security Operations Engineer

Talantir; Tulsa (OK); Remote; USD 110,000 - 170,000; Full time

Job summary

Talantir is seeking a Security Operations Engineer to design, deploy, and operationalize Cortex XSIAM as the foundational platform powering our Aegis MDR practice. This role focuses on engineering security operations platforms, not a traditional SOC analyst role.

You will build telemetry pipelines, detections, automations, and integrations for a modern, scalable MDR service, collaborating with engineering teams and customer stakeholders to ensure high‑fidelity detections and efficient response

Qualifications

• 2+ years in security operations engineering or similar role.
• Hands-on experience deploying and engineering SIEM/XDR platforms.
• Experience integrating diverse data sources (EDR/XDR, firewalls, identit y providers, cloud).
• Strong written and verbal communication skills.

Responsibilities

• Lead end-to-end deployment and implementation of Cortex XSIAM in customer environments.
• Design and implement log ingestion pipelines, data normalization, and asset context.
• Ensure Cortex XSIAM is fully operational and aligned with MDR requirements.
• Integrate Cortex XSIAM with endpoint, network, identity, cloud, and SaaS sources.
• Develop and tune detections and SOAR-based automations to support MDR workflows.
• Collaborate with SOC analysts to validate detections and improve investigations.

Skills

Security operations engineering

SIEM/XDR deployment

Data sources integration

SOC architectures

Detection engineering

Communication skills

Tools

Cortex XSIAM

Cortex XSOAR

CrowdStrike Fusion SOAR

IBM QRadar SOAR

Job description

Position: Security Operations Engineer

Position Type: Direct hire

Location: Remote

Position Summary

Our client is seeking a Security Operations Engineer to design, deploy, and operationalize Cortex XSIAM as the foundational platform that powers our Aegis Managed Detection & Response (MDR) practice.

This is not a traditional SOC analyst or incident responder role. Instead, this position is focused on engineering the security operations platforms that our customers and partners rely on. This includes building the telemetry pipelines, detections, automations, and integrations required for a modern, scalable MDR service or successful customer SOC buildout.

You will work closely with company engineering, customer stakeholders, and be a part of the SOC. This role’s primary responsibility is to ensure Cortex XSIAM is implemented in a way that enables high-fidelity detection, efficient response, and long-term operational success.

Existing experience using Cortex is preferred however training is provided and is mandatory.

Key Responsibilities

Cortex XSIAM Deployment & Engineering

• Lead end-to-end deployment and implementation of Cortex XSIAM in customer environments.
• Design and implement:
  • Log ingestion pipelines
  • Data normalization and parsing
  • Entity modeling and asset context
• Ensure Cortex XSIAM is fully operational and aligned with Aegis MDR requirements

Platform Integration & Enablement

• Integrate Cortex XSIAM with:
  • Endpoint, network, identity, cloud, and SaaS data sources
  • Third-party security and IT systems
• Validate telemetry coverage and data quality across customer environments

Detection & Automation Foundations

• Deploy and tune:
  • Correlation rules
  • Analytics
  • Out-of-the-box and custom detections
• Implement and customize SOAR-based automations and playbooks to support MDR workflows
• Optimize signal quality to reduce noise and improve detection fidelity

SOC & MDR Enablement

• Ensure Cortex XSIAM deployments meet the operational needs of company’s SOC
• Collaborate with SOC analysts to:
  • Validate detections
  • Improve investigation workflows
  • Enable effective response actions
• Support go-live readiness and transition to steady-state MDR operations

Engineering & Continuous Improvement

• Standardize deployment patterns and implementation best practices
• Contribute to internal documentation, runbooks, and reference architectures
• Identify opportunities to improve scalability, efficiency, and automation across customer deployments

Qualifications & Experience

Required

• 2+ years of experience in security operations engineering or similar roles.
• Hands-on experience deploying and engineering SIEM/XDR platforms.
• Experience integrating diverse data sources such as:
  • EDR/XDR
  • Firewalls and network devices
  • Identity providers
  • Cloud platforms
• Strong understanding of:
  • SOC architectures
  • Detection engineering concepts
  • Security telemetry and logging pipelines
• Strong written and verbal communication skills

Preferred

• Experience with Cortex XSIAM and/or Cortex XSOAR (Demisto)
• Experience with any other SOAR platforms (CrowdStrike Fusion SOAR, IBM QRadar SOAR, SentinelOne Singularity automation, etc.)
• Scripting or automation skills (Python, PowerShell, Bash)
• Cloud security and logging experience (AWS, Azure, GCP)
• Palo Alto Networks certifications (PCNSE, PCSAE) or equivalent security certifications