Job Role: Senior Cortex XSIAM SME

100% onsite- Calgary (8am-5pm)

Required Skill Set

Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.
Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.
Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.
Proficiency in automation, scripting workflow optimization within Security Operations environments.
Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.
Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.
Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.
Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.
Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.
Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.
Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.
Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.
Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.
Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.
Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.

Vereiste vaardigheden

Palo Alto Cortex XSIAM/XDRSIEM and log managementSecurity monitoring and threat detectionDeveloping correlation rules and detection/analytics use casesIncident analysis and root cause investigationIntegrating and troubleshooting security data sources and APIsEndpoint agent integration and troubleshootingOT/ICS telemetry integrationAutomation and scripting for security operations/workflow optimizationAWS cloud services and AWS security integrationsCloud security controls and cloud-native security servicesSecurity architecture and technology lifecycle managementFamiliarity with AI-enabled security concepts and security analyticsTechnical documentation, runbooks, and operational reportingMentoring, knowledge transfer and providing operational guidance

Vergelijkbare banen