Security Architect - Remote

Security Architect

100% Remote

12+ Months

REQUIRED SKILLS:
• HANDS-ON PALO ALTO CORTEX XSIAM AND CORTEX XDR DESIGN, IMPLEMENTATION, ADMINISTRATION AND OPERATIONAL SUPPORT.
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting and alert suppression logic.
• Strong experience creating and managing complex playbooks
• CRIBL DATA MODELING, LOG PIPELINE DESIGN, PARSING, NORMALIZATION, ENRICHMENT, ROUTING AND INGESTION.
• Experience developing automation, integrations, playbooks and response
workflows using scripting languages such as Python and Bash.
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks.

PREFERRED SKILLS:
• HANDS-ON EXPERIENCE OPERATING CORTEX XSIAM AND CORTEX XDR IN A LARGE, MULTI-TENANT ENVIRONMENT.
• Hands-on Cribl administration, data modeling and log pipeline optimization experience.
• Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting,
incident response and 24x7 operational handoffs.
• Familiarity with industry-standard security and compliance frameworks
and experience developing playbooks, runbooks, procedures and
technical documentation.