We are looking for an experienced Cortex XSIAM & XSOAR Security Engineer to support the design, implementation, configuration, and optimization of Palo Alto Networks security platforms. The successful candidate will have strong hands-on experience with Cortex XSIAM, Cortex XDR, and Cortex XSOAR , along with a solid understanding of SIEM/SOC operations, cloud security, data ingestion, and security automation.

The role will focus on deploying and maintaining XSIAM capabilities, onboarding security data sources, developing detection logic, creating automated response workflows, and integrating the platform with existing enterprise security technologies.

Job Summary

We are looking for an experienced Cortex XSIAM & XSOAR Security Engineer to support the design, implementation, configuration, and optimization of Palo Alto Networks security platforms. The successful candidate will have strong hands-on experience with Cortex XSIAM, Cortex XDR, and Cortex XSOAR , along with a solid understanding of SIEM/SOC operations, cloud security, data ingestion, and security automation.

The role will focus on deploying and maintaining XSIAM capabilities, onboarding security data sources, developing detection logic, creating automated response workflows, and integrating the platform with existing enterprise security technologies.

Key Responsibilities

- XSIAM Implementation: Deploy and configure Cortex XSIAM environments, including tenant setup, architecture configuration, and connectivity with enterprise/cloud infrastructure.
- Endpoint Deployment: Implement and manage Cortex XDR agents across servers, endpoints, and other supported environments.
- Security Data Integration: Onboard and normalize logs, network telemetry, endpoint data,



cloud security events, and third-party data sources into XSIAM.
- Detection Engineering: Develop, configure, and optimize detection rules, analytics, correlation logic, and threat detection mechanisms.
- XQL Development: Create and optimize XQL queries for threat hunting, investigation, monitoring, and security analytics.
- SOAR Automation: Design and maintain automated incident-response playbooks using Cortex XSOAR .
- Enterprise Integration: Integrate XSIAM/XSOAR with SIEM platforms, ITSM/ticketing tools, threat intelligence platforms, firewalls, cloud services, and other security solutions.
- Platform Troubleshooting: Investigate and resolve agent deployment issues, ingestion failures, parsing problems, integration errors, and alert-related issues.
- Alert Optimization: Analyze false positives and continuously tune detection and correlation rules to improve SOC effectiveness.
- Security Operations: Support threat detection, incident investigation, response, and security monitoring activities across enterprise environments.

Mandatory Skills

- 3+ years of experience in SIEM, XDR, SOC, or security operations environments.
- Solid hands-on experience with Palo Alto Networks Cortex XSIAM implementation, configuration, and administration.




- Proven experience working with Cortex XSOAR - mandatory/deal-breaker skill .
- Strong knowledge of XQL, log analysis, parsing techniques, regular expressions, and security analytics .
- Experience onboarding and managing security data from AWS, Azure, or GCP environments.
- Good understanding of TCP/IP, DNS, firewalls, proxies, network traffic, and security logs .
- Experience with security monitoring, threat detection, alert investigation, and SOC processes.
- Strong troubleshooting and problem-solving capabilities.

Preferred Skills

- Palo Alto Networks certifications related to Cortex XSIAM, Cortex XDR, or Cortex XSOAR .
- Experience developing security automation and orchestration workflows.
- Knowledge of incident response, threat hunting, and SOC operational processes .
- Exposure to integrating XSIAM/XSOAR with enterprise SIEM, ITSM, TIP, and security infrastructure.
- Experience with cloud security monitoring and cloud-native security services.

Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline .
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent communication and stakeholder collaboration abilities.
- Ability to work independently while collaborating effectively with SOC, infrastructure, cloud, and security teams.

Ideal Candidate

The ideal candidate will be a hands-on Palo Alto Cortex XSIAM/XSOAR professional who can independently manage platform deployment, data onboarding, detection engineering, automation, integrations, and troubleshooting. Strong practical experience with XSIAM and XSOAR is essential for this position.

#J-18808-Ljbffr

📌 Test Automation Architect (Brisbane City)
🏢 Silverlink Technologies
📍 Brisbane City