W2/1099 Candidates Only: SIEM Security Architect (10+ Yrs Exp/Cortex XSIAM/XDR/CRIBL/Python/Bash/CISSP/Security+/GIAC): 1+ Yr 100% Remote Project: $ 114/hr on 1099: $ 106/hr W2

Required Skills (rank in order of Importance):

• HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
• CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.
• Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash.
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks.

additional skills & duties:

• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks
• Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures and technical documentation.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response and 24x7 operational handoffs.

Required Education/Certifications:

• BACHELOR'S DEGREE IN AN

INFORMATION TECHNOLOGY OR

INFORMATION SECURITY RELATED

FIELD

• EIGHT YEARS OF RELEVANT WORK

EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION

• FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS

Preferred Education/Certifications:

• CISSP, Security+ or GIAC certification

• Palo Alto Cortex, Cribl or other relevant SIEM/security platform certification