Security Platforms Architect (XSIAM) – Hybrid

NTT America, Inc.; Durban; Hybrid; ZAR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Hybrid working

Job summary

NTT DATA is seeking a Principal Security Platforms Engineer to lead the evolution of the MSSP Cortex XSIAM platform, oversee architecture, onboarding, automation and incident response, and mentor SOC teams.

The role combines security architecture, engineering, detection engineering and automation to ensure a secure, scalable platform supporting managed security services and customer onboarding. Hybrid working is offered.

Qualifications

• Bachelor's degree in Information Technology, Cyber Security, Computer Science or related field.
• Palo Alto Cortex XSIAM Engineer certification (advantageous).
• Cloud security certifications across Azure, AWS or GCP.
• CISSP, CISM, CCSP or equivalent security certifications preferred.
• 10+ years in Cyber Security Engineering, Security Operations, or Security Architecture.
• 2+ years hands‑on experience with Palo Alto Cortex XSIAM/XDR.
• Experience onboarding and normalizing SIEM/XDR telemetry and developing XQL queries.

Responsibilities

• Support the overall architecture, roadmap, and strategic evolution of the MSSP Cortex XSIAM platform and other security platforms.
• Design and maintain multi-tenant service architecture supporting managed security services customers.
• Lead platform architecture reviews and recommend improvements to scalability, performance, resilience and cost optimization.
• Act as trusted advisor for onboarding, architecture, use-case development and platform optimization initiatives.
• Lead and build new service platform and automation for the SOC/security services.
• Support platform upgrades, new integrations design, build and enhance, and feature adoption within XSIAM and other associated security platforms.
• Act as L4 escalation support for complex platform issues.
• Develop and maintain detection content, MITRE ATT&CK mappings, and XQL-based use cases.

Skills

Cortex XSIAM

Python

PowerShell

REST APIs

KQL

XQL

Cloud security

Education

Bachelor's degree (IT/Cyber Security/CS)

Palo Alto Cortex XSIAM Engineer certification

Azure/AWS/GCP cloud security certs

CISSP/CISM/CCSP or equivalent

Tools

Broker‑VMs

Job description

NTT DATA is seeking a Principal Security Platforms Engineer to lead the evolution of the MSSP Cortex XSIAM platform, oversee architecture, onboarding, automation and incident response, and mentor SOC teams.

The role combines security architecture, engineering, detection engineering and automation to ensure a secure, scalable platform supporting managed security services and customer onboarding. Hybrid working is offered.