Cortex XSIAM / XDR Engineer

We are seeking an experienced Security Architect – SIEM Engineer to support 24x7 Security Operations Center (SOC) operations, threat detection, and log pipeline engineering. Key Information Work Arrangement: 100% Fully Remote (Includes monthly 24x7 SOC on-call rotation) Location: Remote (Open to candidates nationwide in the US) Interview Process: 1–2 Virtual/Online rounds Core Technical Skills Required Primary Skills (Must-Have) Palo Alto Cortex: Extensive hands-on experience in designing, implementing, configuring, and supporting XSIAM and XDR in multi-tenant environments. SIEM & SOC Operations: 24x7 SOC experience, multi-tenant engineering, threat hunting, and operational support. Data Engineering & Pipelines: Experience with Cribl (data modeling, parsing, normalization, enrichment, routing, and ingestion). Automation & Scripting: Creating automated playbooks and response workflows using Python and Bash. Telemetry Onboarding: Ingestion and troubleshooting across Cloud, Endpoint, Network, Identity, SaaS, Linux, and Windows platforms. Secondary & Additional Skills Detection Engineering: Tuning correlation rules, analytics, suppression logic, and reducing false positives. Documentation & Process: Developing playbooks, runbooks, SOPs, architecture diagrams, and knowledge base articles. SOC Support: Tier 1 to Tier 3 analyst enablement, shift handoffs, and escalation support. Eligibility & Certifications Education/Experience: Bachelor’s degree in IT/Security OR 8 years of relevant work experience (minimum 5 years in large IT/system deployments). Mandatory Screening: Must pass criminal background check and full credit check. Must obtain annual CJIS certification upon onboarding. Preferred Certifications: CISSP, Security+, GIAC, or platform-specific certifications (Palo Alto Cortex, Cribl).