Job Description
Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.
n
Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.
n
Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.
n
Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.
n
Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM environment.
n
Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.
n
Troubleshooting: Resolve data ingestion gaps, agent errors,



and manage alert false positives to maintain system integrity.
n
Mandatory Skills:
n
n
3+ years of experience in SIEM, XDR, or SOC operations.
n
Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
n
Robust knowledge of log parsing, regular expressions, and query languages (such as XQL).
n
Familiarity with cloud environments including AWS, Azure, or GCP and their associated security logs.
n
Good understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.
n
Proficiency in Cortex XSOAR is a deal breaker for this role.
n

📌 Cortex Engineer - Xsiam (New South Wales)
🏢 CareCone Group
📍 New South Wales