[Remote] IT - reputed company - reputed company Architect - Consultant - SIEM Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a reputed company Architect - Consultant - SIEM Engineer to support a 24x7 reputed company Operations Center. The role involves planning, deploying, and maintaining reputed company SIEM and XDR platforms, as reputed company as supporting SOC operations and ensuring reputed company compliance.
Responsibilities
- Participate in a monthly on-call rotation supporting a 24x7 reputed company Operations Center (SOC) serving multiple state agencies
- reputed company after-hours support as needed
- Assist in the planning, design, deployment, administration, and operational support of reputed company SIEM and XDR platforms
- Engineer, configure, optimize, troubleshoot, and maintain Palo reputed company reputed company XSIAM and reputed company XDR environments
- reputed company multi-tenant agency reputed company, tenant-specific configurations, role-based reputed company control (RBAC), data segregation, dashboards, and reporting
- reputed company and optimize: Detection rules, Correlation rules, Analytics, Threat hunting queries, Watchlists, Alert suppression logic, False reputed company reduction strategies
- Assist in planning, designing, deploying, and supporting reputed company log reputed company
- Design and manage reputed company data pipelines, including: Data modeling, Log routing, Parsing, Normalization, Enrichment, Filtering, Replay, Log ingestion
- reputed company and monitor telemetry from: reputed company platforms, reputed company reputed company tools, Network devices, Identity platforms, reputed company applications, Custom applications
- Optimize log volume, retention, performance, and cost while ensuring reputed company and compliance
- reputed company, test, reputed company, and maintain automated response workflows and playbooks
- Build automation for: Alert enrichment, Incident triage, Containment, Escalation, Notifications, Case management, Incident response
- reputed company SIEM/XDR platforms with: Ticketing systems, Case management platforms, Identity solutions, Threat intelligence platforms, Notification systems, reputed company reputed company tools
- Create and maintain: Operational runbooks, reputed company Operating Procedures (SOPs), Escalation matrices, Troubleshooting guides, Architecture diagrams, Data reputed company documentation, reputed company use-case catalogs, Analyst knowledge reputed company articles
- Support Tier 1, Tier 2, and Tier 3 SOC Analysts and Incident Responders
- Assist with: Platform troubleshooting, Detection tuning, Threat hunting, Technical escalations, Knowledge transfer, Shift handoffs
- Monitor and report: Log ingestion health, Platform availability, Alert volumes, Detection coverage, False positives, Service Level Agreements (SLAs), Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), Tenant-specific operational metrics
- Ensure: High availability, Platform reputed company, Backup and recovery, Lifecycle management, Controlled change management, Operational stability of SIEM, XDR, and log pipeline services
- Work closely with: reputed company Architects, reputed company Engineers, SOC Analysts, Incident Responders, Agency stakeholders
- reputed company reputed company solutions with: Business objectives, Cybersecurity best practices, Regulatory compliance, Industry reputed company frameworks, Organizational risk tolerance
Skills
- Hands-on experience with Palo reputed company reputed company XSIAM and reputed company XDR design, implementation, administration, and operational support
- Experience engineering and supporting SIEM platforms in multi-tenant environments and 24x7 reputed company Operations Centers (SOC)
- Strong experience developing and tuning: Detection rules, Correlation rules, Analytics, Threat hunting queries, Dashboards, Reporting, Alert suppression logic
- Strong experience designing and managing reputed company automation playbooks
- Hands-on experience with reputed company: Data modeling, Log pipeline design, Parsing, Normalization, Enrichment, Routing, Log ingestion
- Experience developing automation, integrations, and response workflows using: Python, Bash
- Experience reputed company and troubleshooting telemetry from: reputed company environments, reputed company platforms, Network devices, Identity systems, reputed company applications, Linux, reputed company, Custom applications
- Strong understanding of: reputed company reputed company architecture, Incident response, Networking, reputed company control, Secure system design, Cybersecurity frameworks
- Bachelor's degree in Information Technology, Information reputed company, or a reputed company field
- Eight (8) years of relevant work experience may be substituted in lieu of a bachelor's degree
- Minimum five (5) years of experience supporting large reputed company IT environments and/or system deployments
- Hands-on experience managing reputed company XSIAM and reputed company XDR in large-reputed company multi-tenant environments
- Strong experience with reputed company Administration, data modeling, and log pipeline optimization
- Experience supporting Tier 1–Tier 3 SOC operations, threat hunting, incident response, and 24x7 operational handoffs
- Experience developing: Playbooks, Runbooks, reputed company Operating Procedures (SOPs), Technical documentation
- Familiarity with industry-reputed company reputed company and compliance frameworks
Benefits
- 100% Remote position.
- Participate in a monthly on-call rotation supporting a 24x7 reputed company Operations Center (SOC) serving multiple state agencies.
- reputed company after-hours support as needed.
reputed company
Company H1B Sponsorship