SIEM Engineer

CCS Global Tech; United States; On-site; USD 95,000 - 130,000; Full time

Job summary

CCS Global Tech is seeking a seasoned Security Operations professional to support a 24x7 SOC with a monthly on-call rotation. You will design, implement, and optimize Cortex XSIAM/XDR, Cribl-based pipelines, and multi-tenant SIEM environments, while building automation with Python/Bash and developing complex playbooks.

Requires 5+ years of large IT deployments and relevant certifications; CJIS background check included.

Qualifications

• Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR – design, implementation, administration, and optimization.
• Strong experience with Cribl, log pipeline design, parsing, normalization, and ingestion.
• Experience supporting multi-tenant SIEM environments and 24x7 SOC operations.
• Expertise in detection engineering, correlation rules, threat hunting, and incident response.
• Experience developing complex playbooks, automation workflows, and integrations using Python/Bash.
• Minimum 5 years of experience supporting large IT environments or system deployments.
• Bachelor's degree in IT/Security or 8 years of relevant experience in lieu of a degree.
• Relevant certifications: CISSP, Security+, GIAC, Palo Alto Cortex, or Cribl.

Skills

SOC operations

Detection engineering

Threat hunting

Incident response

Automation workflows

Education

Bachelor's degree in IT/Security

8 years of relevant experience in lieu of a degree

Tools

Palo Alto Cortex XSIAM

Palo Alto Cortex XDR

Cribl

Python

Bash

Job description

Schedule: Monthly on-call rotation supporting a 24x7 SOC

*Required W2 Only*

Key Requirements:

• Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR – design, implementation, administration, and optimization.
• Strong experience with Cribl, log pipeline design, parsing, normalization, and ingestion.
• Experience supporting multi-tenant SIEM environments and 24x7 SOC operations.
• Expertise in detection engineering, correlation rules, threat hunting, and incident response.
• Experience developing complex playbooks, automation workflows, and integrations using Python/Bash.
• Minimum 5 years of experience supporting large IT environments or system deployments.
• Bachelor's degree in IT/Security or 8 years of relevant experience in lieu of a degree.
• Relevant certifications: CISSP, Security+, GIAC, Palo Alto Cortex, or Cribl.

Additional Requirement: Must be willing to undergo background and credit checks and obtain annual CJIS certification.