Deployment & Setup: Implement Cortex XSIAM architecture, configure tenants, and establish cloud infrastructure connections.

Agent Rollout: Deploy Cortex XDR agents across various endpoints and servers to ensure comprehensive coverage.

Data Onboarding: Ingest third party logs, network telemetry, and cloud data sources into the XSIAM platform.

Rule Configuration: Build and tune detection rules, analytics, and correlation logic to enhance threat detection capabilities.

Playbook Design: Create automated response playbooks utilizing Cortex XSOAR capabilities within the XSIAM setting.

Integration: Connect XSIAM with existing enterprise tools such as SIEM, ticketing systems, and threat intelligence feeds.

Troubleshooting: Resolve data ingestion gaps, agent errors,



and manage alert false positives to maintain system integrity.

Mandatory Skills:
3+ years of experience in SIEM, XDR, or SOC operations.
Hands on experience with Palo Alto Networks Cortex XSIAM architecture and configuration.
Strong knowledge of log parsing, regular expressions, and query languages (such as XQL).
Familiarity with cloud settings including AWS, Azure, or GCP and their associated security logs.
Positive understanding of networking concepts including TCP/IP, DNS, firewalls, and proxy logs.
Proficiency in Cortex XSOAR is a deal breaker for this role.
J-18808-Ljbffr

📌 Cortex Engineer Xsiam New South Wales (Australia)
🏢 CareCone Group
📍 Australia