Cortex XSIAM Engineer - XSOAR, XDR, SIEM, SOAR, Palo Alto, Fully Remote (UK) Outside IR35

Cortex XSIAM Engineer - XSOAR, XDR, SIEM, SOAR, Palo Alto Networks, Cortex XSIAM, Fully Remote (UK) Outside IR35

This is an exceptional Cortex XSIAM Engineer opportunity with a leading tech organisation.

The Cortex XSIAM Engineer role is fully remote (UK) and you must be eligible for UK security clearance

The Cortex XSIAM Engineer contract is Outside IR35 and rate is negotiable - open to paying higher rate for required skills.

As Cortex XSIAM Engineer you will lead the architecture, deployment and integration of Cortex XSIAM for enterprise SOC environments. The Cortex XSIAM Engineer will deliver discovery and solution design, Broker VM and component deployment, log onboarding and custom parsing, endpoint and security module configuration, detection tuning, SOAR playbooks, threat intelligence integrations, dashboards and technical documentation. The Cortex XSIAM Engineer must combine deep platform knowledge with strong client-facing communication skills.

Key skills as Cortex XSIAM Engineer

• Proven track record with Cortex XSIAM, Cortex XSOAR or Cortex XDR experience
• Cortex XSIAM architecture, discovery, deployment and operationalisation
• Broker VMs, automation engines and on-premises component design
• Native and non-native log ingestion, custom parsers and data models
• Endpoint agents, prevention profiles, exclusions and policy tuning
• Correlation rules, BIOCs, IOCs, threat hunting and MITRE ATT&CK
• SOAR playbooks, automation scripts, third-party APIs and threat intelligence
• Python, regex, REST APIs and JSON
• Custom queries, dashboards, reporting layouts and SOC tuning
• Solution Design, As-Built documentation and excellent client communication

Desirable skills as Cortex XSIAM Engineer

• Existing UK Gov Active SC clearance
• Advanced Email Security implementation
• Attack Surface Management (ASM)
• Palo Alto Certifications, PCNSE etc
• Exposure Management, vulnerability scanning and remediation workflows
• Threat Intel Management feeds and enterprise SOC consulting

This is a fantastic Cortex XSIAM Engineer contract offering fully remote work, enterprise SOC transformation engagements and long-term project stability.

Key skills: Cortex XSIAM Engineer,XSOAR, XDR, SIEM, SOAR, Palo Alto Networks, Cortex XSIAM, Fully Remote (UK) Outside IR35, Fully Remote (UK/EU) Outside IR35

*PLEASE READ BEFORE APPLYING*

Please ensure you are UK based before applying. This Cortex XSIAM Engineer role and will require UK Gov SC clearance - so you must be eligible.

Please ensure your location is clear on your CV/application. Applications without a clear UK or EU location may be rejected.

*PLEASE DO NOT CALL THE SWITCHBOARD TO DISCUSS APPLICATIONS* Due to high volume we cannot discuss individual applications one of our Consultants will contact you if your application is suitable.