Sr MSIAM SOC Engineer (Unit 42)
Core
Architect end-to-end security lifecycles and drive the creation, validation, and optimization of custom detection rules and automated playbooks for enterprise customers using Cortex XSIAM.
Role type
Senior SOC Detection Engineer (Unit 42)
Builds
High-fidelity Cortex XSIAM correlation rules, automated response playbooks, and security detection logic.
Domain
Cybersecurity, Threat Intelligence, SIEM/SOAR
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Detection Engineering lifecycle mastery, SIEM/EDR/SOAR platform expertise, Python for security automation, Threat Intelligence translation, Incident Response, Threat Hunting, Rule testing frameworks, Soft-deployment strategies, QA of detection logic
Preferred skills
Cortex XSIAM optimization experience
Technologies
Cortex XSIAM, Cortex XSOAR, SIEMs, Firewalls, EDR, Sandboxes
Responsibilities
Own full lifecycle of custom detections and response automations; Drive continuous refinement of correlation rules for performance and accuracy; Translate Unit 42 threat intelligence into actionable detection logic; Champion proactive automation via sophisticated playbooks; Architect end-to-end security lifecycles connecting data ingestion to response automation
Seniority
Senior, hands-on IC