Job Description

Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.

n

Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.

n

Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.

n

Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.

n

Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.

n

Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.

n

Troubleshooting: Resolve data ingestion gaps, agent errors,



and manage alert false positives to maintain system integrity.

n

Mandatory Skills:

n

n
- 3+ years of experience in SIEM, XDR, or SOC operations.
n
- Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
n
- Strong knowledge of log parsing, regular expressions, and query languages (such as XQL).
n
- Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.
n
- Positive understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.
n
- Proficiency in Cortex XSOAR is a deal breaker for this role.
n

📌 Cortex Engineer - XSIAM (New South Wales)
🏢 CareCone Group
📍 New South Wales