Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.

Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.

Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.

Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.

Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.

Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.

Troubleshooting: Resolve data ingestion gaps, agent errors,



and manage alert false positives to maintain system integrity.

Mandatory Skills:

- 3+ years of experience in SIEM, XDR, or SOC operations.
- Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
- Solid knowledge of log parsing, regular expressions, and query languages (such as XQL).
- Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.
- Good understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.
- Proficiency in Cortex XSOAR is a deal breaker for this role.

#J-18808-Ljbffr

📌 Cortex Engineer - XSIAM (City of Sydney)
🏢 CareCone Group
📍 City of Sydney