Search Jobs | Dice.com

11 results (2 new)

Group by company

Cortex XSIAM Engineer

SRI Tech Solutions

Remote • Today

Easy Apply

Third Party, Contract

Depends on Experience

Sr. Technical Support Engineer (Cortex XSIAM)

PaloAlto Networks

Plano, Texas • Today

Full-time

USD 103,400.00 - 167,200.00 per year

Senior Staff Engineer Software (Cortex Platform)

PaloAlto Networks

California • Today

Full-time

Principal Software Engineer (Cortex Platform)

PaloAlto Networks

California • Today

Full-time

USD 147,000.00 - 237,500.00 per year

Principal UI Engineer, Platform (Cortex)

PaloAlto Networks

California • Today

Full-time

Senior Staff Engineer Software (Cortex XSOAR)

PaloAlto Networks

California • Today

Full-time

USD 134,600.00 - 217,800.00 per year

Senior Principal Software Engineer (Cortex Platform)

PaloAlto Networks

California • Today

Full-time

USD 183,600.00 - 297,000.00 per year

Principal Technical Product Engineer - Agentic AI & Automation (Cortex)

PaloAlto Networks

Remote or California • Today

Full-time

USD 163,200.00 - 264,000.00 per year

Sr Principal/Principal Technical Product Engineer - Data Security (Cortex)

PaloAlto Networks

Remote or California • Today

Full-time

USD 202,800.00 - 278,250.00 per year

Cortex XSOAR

ITBrainiac Inc

Atlanta, Georgia • 7d ago

Easy Apply

Contract

Depends on Experience

Manager, MSIAM SOC Engineering

PaloAlto Networks

Remote or California • Today

Full-time

USD 175,400.00 - 283,800.00 per year

Job Details

Skills

SIEM
Splunk
Cortex XSIAM

Summary

Experience / Qualifications – Cortex XSIAM

Exceptional written and verbal communication and presentation skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.
6+ years of hands-on experience deploying and managing SIEM and SOAR solutions in large-scale enterprise environments, including direct experience with Palo Alto Networks Cortex XSIAM.
Proven expertise in onboarding log sources and integrating them into Cortex XSIAM using Broker VMs, XDR Collectors, and custom ingestion methods.
Proficient in developing and managing XSIAM Data Models, including field mapping, enrichment, normalization, and schema standardization across multiple data sources.
Strong experience crafting and optimizing detection logic using XQL (XSIAM Query Language) to build high-fidelity correlation rules, dashboards, and proactive threat hunting queries.
Solid understanding of Palo Alto XDR endpoint integration, sensor health monitoring, and policy tuning for enhanced endpoint visibility.
Experienced in event collection strategy, log onboarding, log tuning, and normalization to ensure high-quality and actionable data within the XSIAM platform.
Demonstrated ability to translate security monitoring requirements into use cases and actionable detection content, aligned with MITRE ATT&CK and industry best practices.
Familiarity with broader SIEM technologies (e.g., Splunk, IBM QRadar) and how they compare/contrast with Cortex XSIAM architecture and capabilities.
Strong grasp of security operations workflows, alert triage, threat detection, incident response, and automation within XSIAM.
Hands-on experience creating and managing security dashboards and visualizations to provide meaningful insights for SOC teams and leadership.
Expertise in Regular Expressions (Regex), JSON parsing, and log analysis to derive context-rich detection strategies.
Working knowledge of generating performance and health reports across log source status, ingestion rates, data pipeline performance, and detection coverage.
Relevant certifications (e.g., Palo Alto Networks Certified XSIAM Engineer or XSIAM Analyst or XSIAM EDU-270). Bachelor’s degree in computer science, Information Security, or related field is a plus.

Activities / Responsibilities – Cortex XSIAM

Collaborate with technical leads and stakeholders to define and execute a robust log ingestion strategy for Cortex XSIAM using Broker VMs and Collectors.
Serve as both a Security Analyst and SIEM Engineer, owning end-to-end workflows from data onboarding to detection content development and incident response support.
Design and implement XQL-based correlation rules to detect and alert on suspicious behavior across endpoint, network, and cloud environments.
Create, tune, and manage data models to normalize and enrich telemetry data in alignment with Cortex XSIAM’s schema requirements.
Build operational dashboards using XQL that provide actionable insights into threat posture, detection efficacy, and log source coverage.
Act as SME for XSIAM log ingestion processes, correlation logic, alert tuning, and detection strategy development.
Engage directly with end customers to assess their environment, identify visibility gaps, and provide strategic recommendations for log onboarding and threat coverage.
Monitor, optimize, and troubleshoot log source ingestion pipelines and Collector/Broker VM performance.
Fine-tune alerts and detections to minimize false positives and improve SOC analyst efficiency.
Collaborate with threat intelligence and detection engineering teams to implement behavioral detections mapped to ATT&CK techniques.
Support analyst teams in interpreting alerts, performing incident investigations, and leveraging XSIAM's investigation and automation features.
Drive automation opportunities using XSIAM playbooks to reduce manual workload and enhance response times.
Conduct workshops, training sessions, and periodic health checks with customers to promote adoption and maturity in their XSIAM usage.
Participate in post-incident reviews and detection gap analysis to strengthen overall threat detection strategy.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10354711
Position Id: 9122417
Posted 2 hours ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Contact the job poster

Praveen Palavalasa

Lead Talent Acquisition @ SRI Tech Solutions

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Remote

•

Yesterday

REMOTE / PART TIME Project Global Solutions Group (GSG) is seeking a Junior Microsoft Sentinel Engineer to support an active client migration from a legacy cloud-based SIEM platform to Microsoft Sentinel. This role will work alongside a team of experienced security engineers and architects and will contribute to the deployment, tuning, and operationalization of Sentinel within the client's environment. This is an excellent opportunity for an early-career cybersecurity professional looking to gai

Easy Apply

Contract

60 - 70

SecOps Engineer - North Central region (Remote in the U.S.)

Remote

•

Today

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk. General Description We are looking for a skil

Full-time

Manager, MSIAM SOC Engineering

Remote or California

•

Today

Our Mission At Palo Alto Networks , we're united by a shared mission-to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place. Who We Are In order to be the cybersecurity partner of choice, w

Full-time

USD 175,400.00 - 283,800.00 per year

Tier 2 SOC Analyst / Senior SOC Analyst

Remote

•

Today

Key Role Details Position: Security Analyst Project Lead Location: Columbia, SC (Nationwide open; Eastern Time Zone hours required) Work Arrangement: Remote / Hybrid / Onsite (Preference given to local/onsite candidates) Interview Process: Virtual/Online Interview (1 round, with potential for in-person) Key Required & Preferred Skills To succeed in this position, candidates should possess expertise in the following areas: < data-path-to-node="5">Core Requirements Security Monitoring & Incident

Easy Apply

Third Party, Contract

Depends on Experience