Security Architect

Job Summary

Focused on Palo Alto Cortex XSIAM and Cortex XDR, the remote Security Architect will design, implement, and optimize security solutions while providing operational support to a 24x7 Security Operations Center, assisting with multi-tenant environments and incident response.

Key responsibilities

• Plan, design, deploy, and administer enterprise SIEM and XDR capabilities, including configuration and troubleshooting of Palo Alto Cortex platforms
• Assist in the operational support of log management and security data pipelines, ensuring optimal performance and compliance
• Develop, test, and maintain automated response workflows and operational documentation for incident response and analyst support

Required qualifications

• Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR design and operational support
• Experience engineering SIEM capabilities for multi-tenant environments and 24x7 SOC operations
• Proficiency in Cribl data modeling and log pipeline design
• Experience in automation and scripting using languages such as Python and Bash
• Bachelor's degree in Information Technology or Information Security, with eight years of relevant work preferred