Senior Security Platforms Architect: XSIAM & Automation

NTT America, Inc.; Gqeberha; Hybrid; ZAR 1,400,000 - 2,000,000; Full time

Job summary

NTT DATA in South Africa seeks a Principal Security Platforms Engineer to lead the MSSP Cortex XSIAM platform architecture, onboarding, and automation. You will guide detection engineering, content development, integrations, and advanced troubleshooting, while mentoring SOC and engineering teams.

This hybrid role requires deep expertise in Cortex XSIAM, SIEM/XDR, cloud security (Azure/AWS/GCP), and strong collaboration with vendor support to drive platform evolution and threat detection

Qualifications

• Bachelor's degree in Information Technology, Cyber Security, Computer Science or related field.
• Palo Alto Cortex XSIAM Engineer certification (advantageous).
• Relevant cloud security certifications across Azure, AWS or GCP.
• CISSP, CISM, CCSP or equivalent security certifications preferred.

Responsibilities

• Support Cortex XSIAM and other security platforms architecture, roadmap, and evolution.
• Design multi-tenant service architecture for managed security services.
• Lead architecture reviews; recommend scalability, performance, resilience, cost optimization.
• Provide onboarding, architecture guidance, use-case development and platform optimization.
• Lead and build new service platform and automation for SOC/security services.
• Support upgrades, new integrations design, build, and feature adoption.
• Provide L4 escalation support for platform issues and detection gaps.
• Advise on development/optimization of correlation and suppression rules.
• Support detection coverage improvements aligning with MITRE ATT&CK techniques.
• Reduce false positives and alert fatigue; review detection performance.
• Engage vendor TAC and engineering on critical incidents.
• Mentor Platform, Detection, and SOC Engineers and Analysts.

Skills

Cortex XSIAM

SIEM

SOAR

XDR

Detection Engineering

Python

PowerShell

Rest APIs

KQL

XQL

Cloud Security

Azure

AWS

GCP

Team Leadership

Mentoring

Education

Bachelor's degree in Information Technology, Cyber Security, Computer Science or related field

Palo Alto Cortex XSIAM Engineer certification

Cloud security certifications (Azure, AWS, GCP)

CISSP / CISM / CCSP or equivalent security certifications

Tools

Job description

NTT DATA in South Africa seeks a Principal Security Platforms Engineer to lead the MSSP Cortex XSIAM platform architecture, onboarding, and automation. You will guide detection engineering, content development, integrations, and advanced troubleshooting, while mentoring SOC and engineering teams.

This hybrid role requires deep expertise in Cortex XSIAM, SIEM/XDR, cloud security (Azure/AWS/GCP), and strong collaboration with vendor support to drive platform evolution and threat detection