We are seeking an experienced SIEM Subject Matter Expert with deep Palo Alto Networks Cortex XSIAM expertise for a Sydney based project.
In this hands-on delivery role, you will take end-to-end ownership of the enterprise SIEM data pipeline—from log source onboarding, parsing, and normalization through to telemetry enrichment, alert fidelity tuning, and platform health management. Combining deep technical capability with an automation mindset, you will streamline how recent data sources are connected to ensure security analysts have complete, high-quality context directly within the platform.
We would look at both a contract or permanent person for this role
Key Responsibilities
- Log Source Onboarding: Onboard diverse enterprise log sources, leading log parsing, field extraction, data modeling, and normalization to common information models.
- Automation & Tooling: Design, build,
and maintain automated onboarding tooling (via scripting, APIs, or native capabilities) to reduce manual effort and accelerate data connection times.
- Telemetry Enrichment: Manage enrichment pipelines that append critical context (asset ownership, identity, business criticality, and threat intelligence) to raw log events—eliminating the need for analysts to pivot between tools.
- Detection & Alert Tuning: Fine-tune SIEM configurations and detection content to measurably reduce false positives and elevate overall signal quality.