Security Architect - Consultant - SIEM Engineer

Role: Security Architect - Consultant - SIEM Engineer

Location: Columbia, SC (Remote)

Duration: 12+ months

Job Description:

Interview Process: 1-2 rounds, Virtual/Online

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
• CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.
• Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry- standard cybersecurity frameworks.

ADDITIONAL SKILLS & DUTIES:

• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks
• Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs.

REQUIRED EDUCATION/CERTIFICATIONS:

• Bachelor s degree in information technology or information security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Five years of experience in supporting large IT environments and/or system deployments.

PREFERRED EDUCATION/CERTIFICATIONS:

• CISSP, Security+ or GIAC Certification
• PALO ALTO CORTEX, CRIBL or other relevant SIEM/security platform certification