Role: Network Security - Cortex XSIAM Engineer (Implementation & Configuration)
Location: Sydney
Fulltime (Permanent)
Job Summary:
- We are seeking a skilled Cortex XSIAM SME / Engineer to join our team.
- The ideal candidate will have extensive experience in implementing and configuring Cortex XSIAM solutions, with a robust focus on deployment, data onboarding, and integration with existing enterprise tools.
- This role requires a deep understanding of security operations, cloud environments, and network protocols.
Responsibilities:
- Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.
- Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.
- Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.
- Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.
- Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.
- Integration: Connect XSIAM with existing enterprise tools such as SIEM,
ticketing systems, and threat intelligence feeds.
- Troubleshooting: Resolve data ingestion gaps, agent errors, and manage alert false positives to maintain system integrity.
Mandatory Skills
- 3+ years of experience in SIEM, XDR, or SOC operations.
- Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
- Strong knowledge of log parsing, regular expressions, and query languages (such as XQL).
- Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.
- Good understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.
- Proficiency in Cortex XSOAR is a deal breaker for this role.
Preferred Skills:
- Palo Alto Networks Certified Cortex XSIAM Analyst or Engineer certifications.
- Experience with automation and orchestration in security operations.
- Knowledge of incident response processes and methodologies.
Interested Candidates can share their updated resumes on
[email protected] or can reach me on +61 251 103 879
📌 Network Security - Cortex XSIAM Engineer (Implementation & Configuration) (Sydney)
🏢 CareCone Group
📍 Sydney