Senior SIEM Architect: Cortex XSIAM/XDR & Cribl

HTC Global; Columbia (SC); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Paid time off

Professional development opportunities

Job summary

HTC Global Services is seeking a Senior SIEM Engineer to design and operate Palo Alto Cortex XSIAM/XDR and Cribl pipelines in a large, multi-tenant SOC. You will implement detection content, automate workflows and support 24x7 operations.

The role emphasizes building scalable security data pipelines, optimizing telemetry ingestion and collaborating with security architects to improve incident response and security posture.

Qualifications

• Bachelor's degree in IT or information security.
• 8+ years of relevant work experience may substitute education.
• 5+ years in large IT environments or deployments.
• Hands-on Cortex XSIAM and Cortex XDR experience.
• Experience with Cribl data modeling and log pipelines.
• Automation and integrations with Python and Bash.
• Telemetry from cloud/endpoint/network/SaaS sources.
• Detections, dashboards, reports and alert tuning.

Responsibilities

• Plan, design, deploy and support enterprise SIEM and XDR capabilities (XSIAM/XDR).
• Manage multi-tenant onboarding, configurations and access controls.
• Develop and optimize detection content, rules and analytics.
• Support Cribl data modeling, routing, parsing and ingestion.
• Onboard telemetry from cloud, endpoint, network, identity and SaaS sources.
• Develop automated response workflows and complex playbooks.
• Build integrations with ticketing, case management, and SIEM/SEC ops tools.
• Create runbooks, SOPs, diagrams and technical documentation.
• Provide Tier 1–3 SOC support, including incident response and threat hunting.
• Monitor ingestion health, platform performance and alert volumes.

Skills

SIEM & XDR design

Multi-tenant environments

Automation & playbooks

Threat hunting queries

Python & Bash scripting

Telemetry ingestion

Incident response

Education

Bachelor's degree in IT or Info Security

Tools

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Python

Bash

Job description

HTC Global Services is seeking a Senior SIEM Engineer to design and operate Palo Alto Cortex XSIAM/XDR and Cribl pipelines in a large, multi-tenant SOC. You will implement detection content, automate workflows and support 24x7 operations.

The role emphasizes building scalable security data pipelines, optimizing telemetry ingestion and collaborating with security architects to improve incident response and security posture.