Security Architect - Consultant - SIEM Engineer

Project overview

Role: Security Architect - Consultant - SIEM Engineer

Nice to have

Job Facts: Contract W2 | 12 Months | Remote | Depends on Experience

Skills: CORTEX XSIAM, CORTEX XDR, PALO ALTO, SIEM, CRIBL, DATA MODELING, LOG PIPELINE, Python and Bash.

Reference: Dice Id: zolva001 | Position Id: 9134205

• CISSP, Security+ or GIAC Certification
• PALO ALTO CORTEX, CRIBL or other relevant SIEM/security platform certification

Project details

Columbia, SC (Remote)

12+ months

Job Description:

Interview Process: 1-2 rounds, Virtual/Online

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

ADDITIONAL SKILLS & DUTIES:

REQUIRED EDUCATION/CERTIFICATIONS:

• HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
• CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.
• Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry- standard cybersecurity frameworks.
• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks
• Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs.
• Bachelor s degree in information technology or information security related field.
• Eight years of relevant work experience may be substituted in lieu of education.
• Five years of experience in supporting large IT environments and/or system deployments.
• Start: flexible
• Duration: 12 Months
• Remote: remote
• Location: US