Security Operations Engineer - SIEM, EDR & Cloud Security

Centric Software; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Centric Software in Palo Alto, CA seeks an SIEM/SOAR Engineer to design, deploy and maintain log source integrations into Cortex XSIAM/XSOAR, and to own detection content and playbooks that drive automated triage and response.

You will work across cloud logging, Entra ID integration and SOC operations, tightening telemetry, tuning alerts and supporting incident response. This hands-on role demands strong engineering chops and collaboration with IT and security teams.

Qualifications

• Experience with SIEM and SOAR platforms, and incident response.
• Hands-on with multi-cloud logging integration (AWS/Azure/GCP).
• Knowledge of monitoring, alerting, and detection engineering.

Responsibilities

• Design, deploy and maintain log source integrations into Palo Alto Cortex XSIAM / XSOAR; ensure data quality.
• Develop, test and improve SOAR playbooks for triage, enrichment and response.
• Own SIEM content including detection rules, correlation policies, dashboards and alert thresholds; tune to reduce false positives.

Skills

SIEM

SOAR

Endpoint security

Cloud security

Logging

Integration

Engineering

Deployment

Incident response

Monitoring

Tools

CrowdStrike Falcon

AWS GuardDuty

Azure Monitor

Entra ID

Job description

Centric Software in Palo Alto, CA seeks an SIEM/SOAR Engineer to design, deploy and maintain log source integrations into Cortex XSIAM/XSOAR, and to own detection content and playbooks that drive automated triage and response.

You will work across cloud logging, Entra ID integration and SOC operations, tightening telemetry, tuning alerts and supporting incident response. This hands-on role demands strong engineering chops and collaboration with IT and security teams.