Note: The job is a remote job and is open to candidates in USA. CSC is a global business, legal, and financial services company based in Wilmington, Delaware, USA. They are seeking a Senior Cyber Security Engineer to enhance their enterprise security stack through advanced detection, response, and automation capabilities, while collaborating closely with SOC analysts and incident responders.
Responsibilities
- Design, deploy, and maintain Cortex XSIAM detections, correlations, and analytics across endpoint, network, cloud, and identity data sources
- Build and tune detection logic to reduce noise while improving true positive rates
- Perform ongoing platform optimization, including ingest management, rule tuning, and performance improvements
- Develop and maintain custom detections using XQL (Cortex Query Language)
- Conduct proactive threat hunting and investigations using XSIAM analytics and telemetry
- Translate threat intelligence and adversary techniques into actionable detections aligned to MITRE ATT&CK
- Design and maintain automated response playbooks to accelerate incident containment and remediation
- Integrate XSIAM with enterprise tooling (e.g., identity, EDR, ticketing, cloud, network security platforms)
- Support continuous improvement of MTTR through automation and orchestration
- Partner with SOC analysts, incident responders, and engineering teams on investigations and response activities
- Support post-go-live enhancements, backlog grooming, and technical debt reduction initiatives
- Provide technical guidance and mentorship to engineers and analysts
Skills
- Minimum 5+ years of experience in Security Operations, Detection Engineering, or SIEM/SOAR engineering
- Hands-on experience with Palo Alto Networks Cortex XSIAM (or strong XDR/XSOAR experience with rapid XSIAM ramp-up)
- Strong working knowledge of SIEM/XDR concepts and log analytics, incident response and threat detection workflows, and automation and orchestration use cases
- Proficiency with XQL, KQL, SPL, or similar security query languages
- Experience integrating data from endpoint, network, cloud, and identity platforms
- Strong scripting experience (Python preferred)
- Experience operating security platforms at enterprise scale
- Familiarity with MITRE ATT&CK and threat intelligence frameworks
- Experience supporting a 24/7 SOC or global security operations team
- Bachelor's degree in computer science, information assurance, MIS or equivalent industry experience
- Preferred experience with endpoint security (Cortex XDR, Defender, CrowdStrike, etc.), cloud security telemetry (AWS, Azure, GCP), identity and access logs (AD, Azure AD, IAM)
- Palo Alto Networks Certified XSIAM Engineer or Analyst certification preferred
- Additional industry certifications are a plus (i.e., CEH, CISM, etc.)
Benefits
- Annual success-sharing bonuses or commission plans based on individual performance
- Support to colleagues with disabilities, ensuring people have the necessary resources to thrive in their roles
- Competitive and comprehensive benefits package that includes annual leave, tuition reimbursement, referral bonuses, and more
- Hybrid or remote work schedules in alignment with local regulations
Company Overview
Company H1B Sponsorship