SIEM Subject Matter Expert (Palo Alto Networks Cortex XSIAM) - Contract
Core
End-to-end ownership of the enterprise SIEM data pipeline, from log source onboarding and normalization to telemetry enrichment and alert tuning for Palo Alto Networks Cortex XSIAM.
Role type
Senior IC SIEM Subject Matter Expert (Palo Alto Networks Cortex XSIAM)
Builds
Automated log onboarding tooling, enriched telemetry pipelines, and tuned detection content
Domain
Cybersecurity / Security Operations Center (SOC)
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Palo Alto Networks Cortex XSIAM, log parsing, data modeling, automation (scripting/APIs), alert tuning, platform lifecycle management
Preferred skills
XQL, MITRE ATT&CK, adjacent SIEM technologies (Splunk, Microsoft Sentinel, IBM QRadar), enterprise SOC/MSSP background
Technologies
Palo Alto Networks Cortex XSIAM, Broker VMs, XDR Collectors, Regex, JSON
Responsibilities
Onboard and normalize diverse enterprise log sources; Design and maintain automated onboarding tooling; Manage telemetry enrichment pipelines; Fine-tune SIEM configurations and detection content; Oversee SIEM platform health, performance, and capacity management
Seniority
Senior, hands-on IC
