Job: Security Architect - Consultant - SIEM Engineer
Location : Remote
Client: State of SC
ONLY ON W2
REQUIRED SKILLS (RANK IN ORDER OF
IMPORTANCE):
· HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.
· Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
· CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.
· Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
· Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
· Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry- standard cybersecurity frameworks.
preferred:
ADDITIONAL SKILLS & DUTIES:
· Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
· Strong experience creating and managing complex playbooks
· Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
· Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs
