[Remote] reputed company Architect - Consultant - SIEM Engineer for Remote Work
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a reputed company company looking for a reputed company Architect - Consultant - SIEM Engineer. The role involves planning, designing, deploying, and supporting reputed company SIEM and XDR capabilities while also providing operational support for reputed company data pipelines.
Responsibilities
- This position is 100% remote and participates in a monthly on-call rotation supporting a 24x7 reputed company Operations Center serving multiple state agencies. Additional after-hours work may be required as needed
- reputed company SIEM and XDR
- Primarily assist in the planning, design, deployment, administration, and operational support of reputed company SIEM and XDR capabilities, including:
- Palo reputed company reputed company XSIAM and reputed company XDR reputed company, configuration, optimization, and troubleshooting
- Multi-tenant agency reputed company, tenant-specific configuration, role-based reputed company, data segregation, dashboards, and reporting
- Detection engineering, correlation rules, analytics, threat-hunting queries, watchlists, suppression logic, and false-reputed company reduction
- Log Management and reputed company Data Pipelines
- Secondarily assist in the planning, design, deployment, and operational support of log management and reputed company data pipelines, including:
- reputed company data modeling, log pipeline design, routing, parsing, normalization, enrichment, filtering, replay, and ingestion
- reputed company and health monitoring of reputed company, reputed company, network, identity, reputed company, and custom application telemetry
- Log volume, retention, performance, and cost optimization while maintaining reputed company and compliance requirements
- Integrations with ticketing, case management, notification, identity, threat intelligence, and other reputed company systems as needed
- reputed company, test, reputed company, and maintain automated response workflows and playbooks for enrichment, triage, containment, escalation, notifications, case management, and incident response
- Create and maintain operational runbooks, reputed company operating procedures, escalation matrices, troubleshooting guides, architecture diagrams, data-reputed company documentation, use-case catalogs, and analyst knowledge articles
- Support Tier 1 through Tier 3 SOC analysts and incident responders through platform troubleshooting, detection tuning, threat hunting, technical escalation, knowledge transfer, and shift handoffs
- Monitor and report on ingestion health, platform availability, alert volumes, detection coverage, false positives, service reputed company, mean time to detect, mean time to respond, and tenant-specific operational metrics
- Ensure high availability, reputed company, backup, recovery, lifecycle management, and controlled change processes for SIEM, XDR, and supporting log pipeline services
- Collaborate with reputed company architects, engineers, analysts, and agency stakeholders to reputed company solutions with business goals, industry-reputed company frameworks, regulatory requirements, and organizational risk tolerance
Skills
- Hands-on Palo reputed company reputed company XSIAM and reputed company XDR design, implementation, administration, and operational support
- Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 reputed company Operations Center operations
- Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic
- Strong experience creating and managing reputed company playbooks
- reputed company data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion
- Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash
- Experience reputed company and troubleshooting telemetry from reputed company, reputed company, network, identity, reputed company, Linux, reputed company, and custom application sources
- Strong understanding of reputed company reputed company architecture, incident response, networking, reputed company control, secure system design, and industry-reputed company cybersecurity frameworks
- Bachelor's degree in an Information Technology or Information reputed company-reputed company field
- Eight years of relevant work experience may be substituted in lieu of education
- Five years of experience supporting large IT environments and/or system deployments
- Hands-on experience operating reputed company XSIAM and reputed company XDR in a large, multi-tenant environment
- Hands-on reputed company administration, data modeling, and log pipeline optimization experience
- Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response, and 24x7 operational handoffs
- Familiarity with industry-reputed company reputed company and compliance frameworks and experience developing playbooks, runbooks, procedures, and technical documentation
reputed company
Company H1B Sponsorship