Senior SIEM Engineer - 24x7 SOC & Cortex XSIAM Expert

United Global Technologies, Inc.; Columbia (SC); On-site; USD 120,000 - 180,000; Full time

Job summary

United Global Technologies, Inc. seeks an experienced SIEM engineer to design, implement, and support a 24x7 SOC. The role focuses on Cortex XSIAM/XDR, Cribl data pipelines, and multi-tenant SIEM operations across enterprise environments.

Candidates should have 8+ years in IT/security, strong scripting skills (Python/Bash), and experience onboarding telemetry from cloud to on-prem sources. CISSP/SGIAC certifications are preferred.

Qualifications

• Bachelor's degree or 8+ years of relevant experience required.
• Experience delivering large IT environment deployments and/or system deployments.
• Experience supporting SIEM in multi-tenant, 24x7 SOC contexts.
• Proficiency with Cortex XSIAM/XDR, Cribl, and SIEM tooling.
• Strong automation skills using Python and Bash.
• Ability to onboard and troubleshoot telemetry across cloud, endpoints, networks, identity and SaaS sources.
• Knowledge of enterprise security architecture, IR, networking and cybersecurity frameworks.

Skills

Cortex XSIAM/XDR design and operations

SIEM multi-tenant & 24x7 SOC

CRIBL data modeling & log pipeline

Automation scripting (Python, Bash)

Telemetry onboarding from cloud/endpt/

Enterprise security architecture & IR

IT security fundamentals & incident响应

Security certifications (CISSP/S+ GIAC

Siem platform certifications (Palo)

8+ years IT environment deployments

Education

Bachelor's degree in information technology or information security related field

Eight years of relevant work experience may be substituted in lieu of education

Job description

United Global Technologies, Inc. seeks an experienced SIEM engineer to design, implement, and support a 24x7 SOC. The role focuses on Cortex XSIAM/XDR, Cribl data pipelines, and multi-tenant SIEM operations across enterprise environments.

Candidates should have 8+ years in IT/security, strong scripting skills (Python/Bash), and experience onboarding telemetry from cloud to on-prem sources. CISSP/SGIAC certifications are preferred.