Job Description

We are seeking an experienced SIEM Subject Matter Expert with deep Palo Alto Networks Cortex XSIAM expertise for an initial 3-month contract engagement with a high likelihood of extensions, based in Sydney.

In this hands-on delivery role, you will take end-to-end ownership of the enterprise SIEM data pipeline—from log source onboarding, parsing, and normalization through to telemetry enrichment, alert fidelity tuning, and platform health management. Combining deep technical capability with an automation mindset, you will streamline how recent data sources are connected to ensure security analysts have complete, high-quality context directly within the platform.

Key Responsibilities
Log Source Onboarding: Onboard diverse enterprise log sources, leading log parsing, field extraction, data modeling, and normalization to common information models.
Automation & Tooling: Design, build,



and maintain automated onboarding tooling (via scripting, APIs, or native capabilities) to reduce manual effort and accelerate data connection times.
Telemetry Enrichment: Manage enrichment pipelines that append critical context (asset ownership, identity, business criticality, and threat intelligence) to raw log events—eliminating the need for analysts to pivot between tools.
Detection & Alert Tuning: Fine-tune SIEM configurations and detection content to measurably reduce false positives and elevate overall signal quality.
Platform Lifecycle Management: Proactively oversee SIEM platform health, performance monitoring, capacity management, connector/collector maintenance, and platform upgrades.

📌 Siem Subject Matter Expert Palo Alto Networks Cortex Xsiam Contract Sydney (Australia)
🏢 NCS Australia
📍 Australia