Cortex XSIAM SME
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
- Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.
- Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.
- Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.
- Proficiency in automation, scripting workflow optimization within Security Operations environments.
- Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.
- Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.
- Roles and Responsibilities:
- Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.
- Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.
- Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.
- Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.
- Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.
- Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.
- Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.
- Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.
- Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.
- Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.
More about this job
Responsibilities
Administer and support security platforms including Cortex XSIAM/XDR and Wiz while monitoring platform health and resolving integration issues. Develop security detections, correlation rules, and automation to improve operational efficiency and analyst productivity.
Requirements
Requires hands-on experience with cybersecurity platforms, SIEM, and cloud security technologies, specifically within AWS environments. Proficiency in automation, scripting, and the ability to manage the security technology lifecycle is essential.
Skills
- Cortex XSIAM
- Cortex XDR
- Wiz
- Microsoft Defender
- Trellix
- Rapid7
- RedSeal
- SIEM
- AWS Cloud Security
- Threat Detection
- Incident Analysis
- Automation
- Scripting
- Log Management
- Security Architecture
- AI Security
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
- Software
- Data & Analytics
Keywords
- Cortex XSIAM
- Cortex XDR
- Wiz
- Microsoft Defender
- Trellix
- Rapid7
- RedSeal
- SIEM
- Log Management
- Threat Detection
- Correlation Rules
- Incident Analysis
- APIs
- Endpoint Agents
- OT/ICS Telemetry
- Cloud-Native Security
- Automation
- Scripting
- AWS
- Cloud Security Controls
- Security Architecture
- AI Security
- Security Analytics
- Compliance
- Technical Documentation
- Operational Reporting
- Root Cause Analysis
- Patching
- Runbooks
- Cybersecurity Testing