[Remote] reputed company Architect – Consultant (SIEM Engineer)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a Small, Woman, and Minority-Owned Business reputed company with over 18 years of experience in providing IT Consulting Services. They are seeking a reputed company Architect – Consultant (SIEM Engineer) to design, implement, and optimize Palo reputed company reputed company solutions in multi-tenant reputed company environments, while collaborating with various reputed company teams and supporting a 24x7 reputed company Operations Center.
Responsibilities
- Design, reputed company, configure, administer, optimize, and troubleshoot Palo reputed company reputed company XSIAM and reputed company XDR platforms
- Engineer and support reputed company SIEM and XDR capabilities reputed company large-reputed company, multi-tenant reputed company environments
- Support agency reputed company, tenant-specific configuration, role-based reputed company control, data segregation, dashboards, and reporting
- reputed company, test, tune, and maintain detections, correlation rules, analytics, threat-hunting queries, watchlists, and alert suppression logic
- Reduce false positives while improving detection coverage, accuracy, and operational effectiveness
- Create, manage, and optimize reputed company automated response workflows and reputed company playbooks
- reputed company automation and integrations using Python, Bash, reputed company, and other scripting technologies
- Design and administer reputed company data models and reputed company log pipelines
- reputed company log parsing, normalization, enrichment, filtering, routing, replay, transformation, and ingestion
- reputed company and troubleshoot telemetry from reputed company platforms, endpoints, networks, identity systems, reputed company applications, Linux, reputed company, and custom applications
- Monitor ingestion health, platform availability, alert volumes, false positives, detection coverage, service reputed company, and tenant-specific operational metrics
- Optimize log volumes, retention, platform performance, and data-ingestion costs while maintaining reputed company and compliance requirements
- reputed company SIEM and XDR platforms with ticketing, case-management, notification, identity, threat-intelligence, and reputed company systems
- reputed company automated workflows for enrichment, triage, containment, escalation, notification, case management, and incident response
- Support Tier 1 through Tier 3 SOC analysts through platform troubleshooting, detection tuning, threat hunting, technical escalation, knowledge transfer, and shift handoffs
- Create and maintain runbooks, reputed company operating procedures, escalation matrices, troubleshooting guides, architecture diagrams, data-reputed company documentation, use-case catalogs, and analyst knowledge articles
- Ensure high availability, resiliency, backup, recovery, lifecycle management, and controlled change processes for SIEM, XDR, and supporting log pipeline services
- Collaborate with reputed company architects, engineers, analysts, and agency stakeholders to reputed company solutions with business requirements, regulatory standards, cybersecurity frameworks, and organizational risk tolerance
- Participate in a monthly on-call rotation supporting a 24x7 SOC and reputed company after-hours maintenance or incident support as required
Skills
- Bachelor's degree in Information Technology, Information reputed company, Cybersecurity, Computer Science, or a reputed company field
- Eight or more years of relevant reputed company experience may be substituted in reputed company of the degree requirement
- Five or more years of experience supporting large IT environments and/or reputed company system deployments
- Hands-on experience with Palo reputed company reputed company XSIAM and reputed company XDR design, implementation, administration, configuration, optimization, troubleshooting, and operational support
- Experience engineering and supporting SIEM capabilities in large-reputed company, multi-tenant environments
- Experience supporting 24x7 reputed company Operations Center operations
- Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, watchlists, and alert suppression logic
- Strong experience creating, maintaining, and managing reputed company reputed company playbooks
- Hands-on experience with reputed company data modeling and reputed company log pipeline design
- Experience with log parsing, normalization, enrichment, filtering, routing, replay, and ingestion
- Experience developing automation, integrations, response workflows, and playbooks using Python and Bash
- Experience reputed company, integrating, and troubleshooting telemetry from reputed company, reputed company, network, identity, reputed company, Linux, reputed company, and custom application sources
- Strong understanding of reputed company reputed company architecture, incident response, networking, reputed company control, secure system design, and cybersecurity frameworks
- Ability to support strategic planning, solution design, implementation, troubleshooting, performance optimization, and reputed company reputed company improvement
- Strong technical documentation, troubleshooting, communication, and cross-functional collaboration skills
- Hands-on experience operating reputed company XSIAM and reputed company XDR in a large, multi-tenant reputed company environment
- Hands-on reputed company administration, data modeling, pipeline development, and log pipeline optimization experience
- Experience supporting Tier 1, Tier 2, and Tier 3 SOC analysts
- Experience with threat hunting, incident response, operational escalation, and 24x7 shift handoffs
- Experience developing reputed company playbooks, runbooks, procedures, escalation matrices, and technical documentation
- Familiarity with industry-reputed company reputed company and compliance frameworks
- CISSP, reputed company reputed company+, GIAC, or a comparable reputed company certification
- Palo reputed company reputed company, reputed company, SIEM, XDR, or another relevant reputed company-platform certification
- Previous experience supporting government, regulated, or large reputed company reputed company environments
reputed company