Cyber Security Specialist

Hi,

Hope you are doing great.

If you are interested on below role, please share me your Updated resume ASAP.

Client is looking for Cortex XSIAM SME

100% onsite- Calgary (8am-5pm)

Contract : 6+ Months

Required Skill Set

• Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.

• Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.

• Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.

• Proficiency in automation, scripting workflow optimization within Security Operations environments.

• Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.

• Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

• Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.

• Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.

• Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.

• Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.

• Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.

• Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.

• Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.

• Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.

• Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.

• Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.

Regards

Rakesh Ummadi

647-557-6949

Rakesh@apptoza.com