Role Title:

Cortex XSIAM SME / Engineer (Implementation & Configuration)

Location

: Sydney

Responsibilities:

- Deployment & Setup: Implement Cortex XSIAM architecture, tenants, and cloud infrastructure connections.

- Agent Rollout: Deploy Cortex XDR agents across endpoints and servers.

- Data Onboarding: Ingest third-party logs, network telemetry, and cloud data sources into XSIAM.

- Rule Configuration: Build and tune detection rules, analytics, and correlation logic.

- Playbook Design: Create automated response playbooks using Cortex XSOAR capabilities within XSIAM.

- Integration: Connect XSIAM with existing enterprise tools like SIEM, ticketing systems, and threat intel feeds.

- Troubleshooting: Resolve data ingestion gaps, agent errors, and alert false positives.





Requirements / Experience:

- 3+ years of experience in SIEM, XDR, or SOC operations.

- XSIAM Expertise: Hands-on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.

- Data Skills: Strong knowledge of log parsing, regular expressions, and query languages (like XQL).

- Cloud Knowledge: Familiarity with AWS, Azure, or GCP environments and security logs.

- Networking: Valuable grasp of TCP/IP, DNS, firewalls, and proxy logs.

- Certifications: Palo Alto Networks Certified Cortex XSIAM Analyst or Engineer certifications are preferred

📌 Cortex XSIAM SME / Engineer (Implementation & Configuration) (Southern Sydney)
🏢 Tech Mahindra
📍 Southern Sydney