We are seeking an experienced Security Architect – SIEM Engineer to support 24x7 Security Operations Center (SOC) operations, threat detection, and log pipeline engineering.
Key Information
- Work Arrangement: 100% Fully Remote (Includes monthly 24x7 SOC on-call rotation)
- Location: Remote (Open to candidates nationwide in the US)
- Interview Process: 1–2 Virtual/Online rounds
Primary Skills (Must-Have)
- Palo Alto Cortex: Extensive hands-on experience in designing, implementing, configuring, and supporting XSIAM and XDR in multi-tenant environments.
- SIEM & SOC Operations: 24x7 SOC experience, multi-tenant engineering, threat hunting, and operational support.
- Data Engineering & Pipelines: Experience with Cribl (data modeling, parsing, normalization, enrichment, routing, and ingestion).
- Automation & Scripting: Creating automated playbooks and response workflows using Python and Bash.
- Telemetry Onboarding: Ingestion and troubleshooting across Cloud, Endpoint, Network, Identity, SaaS, Linux, and Windows platforms.
Secondary & Additional Skills
- Detection Engineering: Tuning correlation rules, analytics, suppression logic, and reducing false positives.
- Documentation & Process: Developing playbooks, runbooks, SOPs, architecture diagrams, and knowledge base articles.
- SOC Support: Tier 1 to Tier 3 analyst enablement, shift handoffs, and escalation support.
Education/Experience
- Bachelor’s degree in IT/Security OR 8 years of relevant work experience (minimum 5 years in large IT/system deployments).
Mandatory Screening
- Must pass criminal background check and full credit check. Must obtain annual CJIS certification upon onboarding.
Preferred Certifications
- CISSP, Security+, GIAC, or platform-specific certifications (Palo Alto Cortex, Cribl).
Rate:
Not specified
Location:
United States
IR35 Status:
Outside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Not Specified