We are seeking an experienced Security Architect – SIEM Engineer to support 24x7 Security Operations Center (SOC) operations, threat detection, and log pipeline engineering.
Key Information
Work Arrangement: 100% Fully Remote (Includes monthly 24x7 SOC on-call rotation)
Location: Remote (Open to candidates nationwide in the US)
Interview Process: 1–2 Virtual/Online rounds
Core Technical Skills Required
Primary Skills (Must-Have) Palo Alto Cortex: Extensive hands-on experience in designing, implementing, configuring, and supporting XSIAM and XDR in multi-tenant environments.
SIEM & SOC Operations: 24x7 SOC experience, multi-tenant engineering, threat hunting, and operational support.
Data Engineering & Pipelines: Experience with Cribl (data modeling, parsing, normalization, enrichment, routing, and ingestion).
Automation & Scripting: Creating automated playbooks and response workflows using Python and Bash.
Telemetry Onboarding: Ingestion and troubleshooting across Cloud, Endpoint, Network, Identity, SaaS, Linux, and Windows platforms.
Secondary & Additional Skills Detection Engineering: Tuning correlation rules, analytics, suppression logic, and reducing false positives.
Documentation & Process: Developing playbooks, runbooks, SOPs, architecture diagrams, and knowledge base articles.
SOC Support: Tier 1 to Tier 3 analyst enablement, shift handoffs, and escalation support.
Eligibility & Certifications
Education/Experience: Bachelor’s degree in IT/Security OR 8 years of relevant work experience (minimum 5 years in large IT/system deployments).
Mandatory Screening: Must pass criminal background check and full credit check. Must obtain annual CJIS certification upon onboarding.
Preferred Certifications: CISSP, Security+, GIAC, or platform-specific certifications (Palo Alto Cortex, Cribl).