At a Glance
- Tasks: Deploy and manage Cortex XSIAM to enhance cybersecurity operations.
- Company: Join a leading cybersecurity team focused on innovation.
- Benefits: Competitive salary, health benefits, and opportunities for professional growth.
- Other info: Dynamic work environment with a focus on collaboration and career advancement.
- Why this job: Make a real impact in cybersecurity with cutting-edge technologies.
- Qualifications: 5-9 years in SOC engineering and hands-on experience with Palo Alto Cortex XSIAM.
The predicted salary is between 99000 - 121000 $ per year.
Overview We are seeking an experienced Cortex XSIAM Engineer to join our cybersecurity team.
This role is pivotal in deploying, managing, and optimizing our Cortex XSIAM environment to enhance our security operations.
The ideal candidate will have a strong background in cybersecurity analytics and be adept at using Palo Alto Networks technologies.
Responsibilities
Deploy, configure, and manage Cortex XSIAM, focusing on data lake, analytics, and automation.
Onboard and integrate logs and telemetry from various platforms including Cortex XDR, NGFW, Prisma Cloud, O365, AWS, Azure, GCP, Okta, and Crowd Strike.
Ensure data quality, ingestion health, and system performance are maintained.
Develop and fine-tune XQL detections, correlation rules, and behavioral analytics in alignment with MITRE ATT&CK framework.
Build and enhance Cortex XSOAR playbooks and automated workflows for robust automation and integration.
Integrate new APIs and security tools into the XSIAM ecosystem.
Create dashboards and reports to demonstrate detection coverage, rule performance, and platform health.
Maintain comprehensive documentation including runbooks, diagrams, and engineering documentation.
Required Skills
5–9 years of experience in SOC engineering, SIEM/SOAR, or cybersecurity analytics.
At least 2 years of hands-on experience with Palo Alto Cortex XSIAM, including deployment, detections, and onboarding.
Strong knowledge of SIEM pipelines, event correlation, and log normalization.
Expertise in XQL, Python, JSON, and REST APIs.
Good understanding of cloud telemetry and modern SOC technologies like XDR, UEBA, EDR, WAF, and CASB.
Relevant certifications such as PCDRE, PCSAE, PCNSE, GCDA, or other GIAC certifications are preferred.
#J-18808-Ljbffr
SIEM Engineer in Winnipeg employer: SIA Innovations Inc.
Join our dynamic cybersecurity team as a SIEM Engineer, where you'll play a crucial role in enhancing our security operations through the deployment and management of cutting-edge technologies. We pride ourselves on fostering a collaborative work culture that encourages continuous learning and professional growth, offering ample opportunities for skill development and career advancement. Located in a vibrant tech hub, we provide a stimulating environment that values innovation and teamwork, making us an exceptional employer for those seeking meaningful and rewarding work in cybersecurity.
