Security Architect, SIEM Engineer
- Getiva Solutions LLC
9 Hours Ago
NA
W2, C2C, 1099
Remote
11-15 Years
Required Skills: SIEM, Security architect, palo alto, cortex, Cribl, XDR
Job Description
Security Architect - Consultant - SIEM Engineer
They specifically need a Senior SIEM Engineer / Security Architect with strong hands-on experience in Palo Alto Cortex XSIAM, Cortex XDR, and Cribl.
This position is 100% remote and will participate in a monthly on-call rotation supporting the 24x7 Security Operations Center (SOC). After-hours maintenance, incident escalation support, and operational handoffs may be required as needed.
Required Skills (Ranked in Order of Importance)
- Hands-on Palo Alto Cortex XSIAM and Cortex XDR design, implementation, administration, and operational support.
- Bachelor's Degree in an Information Technology or Information Security related field; 8+ years of relevant work may be substituted in lieu of education
- Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
- 5+ years of experience in supporting large IT environments and/or system deployments.
- Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
- Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash.
- Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources.
- Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design, and industry-standard cybersecurity frameworks.
Additional Skills & Duties
- Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic.
- Strong experience creating and managing complex playbooks.
- Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures, and technical documentation.
- Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response, and 24x7 operational handoffs.
Required Education / Certifications
- Bachelor's degree in an Information Technology or Information Security-related field.
- Eight years of relevant work experience may be substituted in lieu of education.
- Five years of experience supporting large IT environments and/or system deployments.
Preferred Education / Certifications
- CISSP, Security+, or GIAC certification.
- Palo Alto Cortex, Cribl, or other relevant SIEM/security platform certification.
