Role : Cortex Engineer - XSIAM

Type of role - Permanent Position

Location : Sydney, Australia

:

Responsibilities

Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.

Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.

Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.

Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.

Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.

Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.

Troubleshooting: Resolve data ingestion gaps, agent errors,



and manage alert false positives to maintain system integrity.

Mandatory Skills

3+ years of experience in SIEM, XDR, or SOC operations.

Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.

Strong knowledge of log parsing, regular expressions, and query languages (such as XQL).

Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.

Valuable understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.

Proficiency in Cortex XSOAR is a deal breaker for this role.

Interested candidate can share share their resume at [email protected] or call me on +61 283195529

📌 Cortex Engineer - XSIAM (Sydney)
🏢 CareCone Group
📍 Sydney