Devbytes inc

Design, implement, and support Palo Alto Cortex XSIAM/XDR and SOC operations including detection tuning and playbook development. | Bachelor's degree or equivalent experience with 5+ years supporting large IT environments and SIEM platforms, plus relevant security certifications preferred. | Job Title : Security SIEM Architect (Security Information and Event Management) Location: Remote 100% Duration: Long term Job Type : Contract (We can consider - W2) Responsibilities: OPTIMIZING PALO ALTO and CORTEX XSIAM AND CORTEX XDR ENGINEERING, and SOC OPERATIONS, REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE): • HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT. • Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations. • Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic. • Strong experience creating and managing complex playbooks • CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION. • Experience developing automation, integrations, playbooks and response REQUIRED EDUCATION/CERTIFICATIONS: • BACHELOR&DEGREE IN AN INFORMATION TECHNOLOGY OR INFORMATION SECURITY RELATED FIELD • EIGHT YEARS OF RELEVANT WORK EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION • FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS PREFERRED EDUCATION/CERTIFICATIONS: • CISSP, Security+ or GIAC certification • Palo Alto Cortex, Cribl or other • relevant SIEM/security platform certification