Senior SIEM Security Architect: XSIAM, XDR & Playbooks

Beechwood Computing Ltd; United States; Remote; USD 150,000 - 200,000; Full time

Job summary

Beechwood Computing Ltd is seeking a Senior SOC Engineer to design, implement and operate Palo Alto Cortex XSIAM/XDR in multi-tenant environments. You will support 24x7 SOC operations, develop detections, playbooks, and runbooks, and work with Cribl and other SIEM platforms.

Requires a Bachelor’s in IT or Information Security and 5+ years in large IT environments; CISSP or GIAC preferred. On-site in the United States with potential for flexible shifts.

Qualifications

• Bachelor’s degree in information technology or information security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Five years of experience in supporting large IT environments and/or system deployments.
• Experience with SIEM platforms and security tooling is essential.

Responsibilities

• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks.
• Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24×7 operational handoffs.

Skills

Threat hunting

Incident response

SOC operations

Automation scripting

Education

Bachelor's degree in information technology or information security related field

Tools

Palo Alto Cortex XSIAM

Cortex XDR

Cribl

Python

Bash

Job description

Beechwood Computing Ltd is seeking a Senior SOC Engineer to design, implement and operate Palo Alto Cortex XSIAM/XDR in multi-tenant environments. You will support 24x7 SOC operations, develop detections, playbooks, and runbooks, and work with Cribl and other SIEM platforms.

Requires a Bachelor’s in IT or Information Security and 5+ years in large IT environments; CISSP or GIAC preferred. On-site in the United States with potential for flexible shifts.