SIEM Cortex XSIAM - Senior Associate

Responsibilities

- Administering and tuning Cortex XSIAM to support threat detection, alert handling, and platform performance
- Developing SIEM use cases mapped to NIST and MITRE ATT&CK techniques to identify attack activity across stages
- Writing and refining SPL and KQL queries for complex correlation across multiple log sources
- Building dashboards, workbooks, and alert logic to support security monitoring and incident triage
- Implementing SOAR workflows using tools such as Logic Apps, Phantom, and Demisto to streamline response steps
- Integrating log sources through REST APIs and supporting connected data flows across cloud and hybrid environments
- Applying knowledge of SIEM architecture, clustered design, parallel processing, and availability concepts in platform support
- Supporting threat hunting, incident analysis, and domain specific proof of concept development
- Using Python scripting, user and entity behavior concepts, and machine learning concepts to strengthen detection logic
- Collaborating with team members on deliverables, technical development, and compliance aligned project work

What You Must Have

- At least a Bachelor's degree
- At least 2 years of experience
- Oral and written proficiency in English required

What Sets You Apart

- At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials
- Building SIEM use cases using NIST and MITRE ATT&CK frameworks
- Implementing SPL or KQL detections across varied data sources
- Developing Cortex XSIAM dashboards, alerts, and workflows
- Integrating logs through REST APIs across cloud and hybrid environments
- Applying Python scripting for SIEM administration and optimization

Travel Requirements

Not Specified

Job Posting End Date