Role Title:

Cortex XSIAM SME / Engineer (Implementation & Configuration)

Location

: Sydney

Responsibilities:
Deployment & Setup: Implement Cortex XSIAM architecture, tenants, and cloud infrastructure connections.
Agent Rollout: Deploy Cortex XDR agents across endpoints and servers.
Data Onboarding: Ingest third-party logs, network telemetry, and cloud data sources into XSIAM.
Rule Configuration: Build and tune detection rules, analytics, and correlation logic.
Playbook Design: Create automated response playbooks using Cortex XSOAR capabilities within XSIAM.
Integration: Connect XSIAM with existing enterprise tools like SIEM, ticketing systems, and threat intel feeds.
Troubleshooting: Resolve data ingestion gaps, agent errors, and alert false positives.





Requirements / Experience:
3+ years of experience in SIEM, XDR, or SOC operations.
XSIAM Expertise: Hands-on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
Data Skills: Solid knowledge of log parsing, regular expressions, and query languages (like XQL).
Cloud Knowledge: Familiarity with AWS, Azure, or GCP environments and security logs.
Networking: Valuable grasp of TCP/IP, DNS, firewalls, and proxy logs.
Certifications: Palo Alto Networks Certified Cortex XSIAM Analyst or Engineer certifications are preferred

📌 Cortex Xsiam Sme / Engineer Implementation & Configuration Southern Sydney (Australia)
🏢 Tech Mahindra
📍 Australia