15 Aug
|
Silverlink Technologies
|
Queensland
15 Aug
Silverlink Technologies
Queensland
We are looking for an experiencedCortex XSIAM & XSOAR Security Engineerto support the design, implementation, configuration, and optimization of Palo Alto Networks security platforms.
The successful candidate will have strong hands-on experience withCortex XSIAM, Cortex XDR, and Cortex XSOAR, along with a solid understanding of SIEM/SOC operations, cloud security, data ingestion, and security automation.
The role will focus on deploying and maintaining XSIAM capabilities, onboarding security data sources, developing detection logic, creating automated response workflows, and integrating the platform with existing enterprise security technologies.
Job Summary
We are looking for an experiencedCortex XSIAM & XSOAR Security Engineerto support the design, implementation, configuration, and optimization of Palo Alto Networks security platforms.
The successful candidate will have strong hands-on experience withCortex XSIAM, Cortex XDR, and Cortex XSOAR, along with a solid understanding of SIEM/SOC operations, cloud security, data ingestion, and security automation.
The role will focus on deploying and maintaining XSIAM capabilities, onboarding security data sources, developing detection logic, creating automated response workflows, and integrating the platform with existing enterprise security technologies.
Key Responsibilities
XSIAM Implementation:Deploy and configure Cortex XSIAM environments, including tenant setup, architecture configuration, and connectivity with enterprise/cloud infrastructure.
Endpoint Deployment:Implement and manage Cortex XDR agents across servers, endpoints, and other supported environments.
Security Data Integration:Onboard and normalize logs, network telemetry,
endpoint data, cloud security events, and third-party data sources into XSIAM.
Detection Engineering:Develop, configure, and optimize detection rules, analytics, correlation logic, and threat detection mechanisms.
XQL Development:Create and optimize XQL queries for threat hunting, investigation, monitoring, and security analytics.
SOAR Automation:Design and maintain automated incident-response playbooks usingCortex XSOAR.
Enterprise Integration:Integrate XSIAM/XSOAR with SIEM platforms, ITSM/ticketing tools, threat intelligence platforms, firewalls, cloud services, and other security solutions.
Platform Troubleshooting:Investigate and resolve agent deployment issues, ingestion failures, parsing problems, integration errors, and alert-related issues.
Alert Optimization:Analyze false positives and continuously tune detection and correlation rules to improve SOC effectiveness.
Security Operations:Support threat detection, incident investigation, response, and security monitoring activities across enterprise environments.
Mandatory Skills
3+ years of experiencein SIEM, XDR, SOC, or security operations environments.
Solid hands-on experience withPalo Alto Networks Cortex XSIAMimplementation, configuration, and administration.
Proven experience working withCortex XSOAR-mandatory/deal-breaker skill.
Strong knowledge ofXQL, log analysis, parsing techniques, regular expressions, and security analytics.
Experience onboarding and managing security data fromAWS, Azure, or GCPenvironments.
Good understanding ofTCP/IP, DNS, firewalls, proxies, network traffic, and security logs.
Experience with security monitoring, threat detection, alert investigation, and SOC processes.
Strong troubleshooting and problem-solving capabilities.
Preferred Skills
Palo Alto Networks certifications related toCortex XSIAM, Cortex XDR, or Cortex XSOAR.
Experience developing security automation and orchestration workflows.
Knowledge ofincident response, threat hunting, and SOC operational processes.
Exposure to integrating XSIAM/XSOAR with enterprise SIEM, ITSM, TIP, and security infrastructure.
Experience with cloud security monitoring and cloud-native security services.
Qualifications
Bachelor's degree inComputer Science, Information Technology, Cybersecurity, or a related discipline.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent communication and stakeholder collaboration abilities.
Ability to work independently while collaborating effectively with SOC, infrastructure, cloud, and security teams.
Ideal Candidate
The ideal candidate will be a hands-onPalo Alto Cortex XSIAM/XSOAR professionalwho can independently manage platform deployment, data onboarding, detection engineering, automation, integrations, and troubleshooting.
Strong practical experience withXSIAM and XSOARis essential for this position.
#J-*****-Ljbffr
📌 Test Automation Architect (Queensland)
🏢 Silverlink Technologies
📍 Queensland