South Carolina Licensed SIEM Engineer

Job Summary

To support the Department of Administration's Division of Information Security, a South Carolina Licensed SIEM Engineer will work remotely on a contract basis for 6 months, focusing on designing, implementing, and optimizing Palo Alto Cortex XSIAM and Cortex XDR platforms in a multi-tenant security environment.

Key Responsibilities

• Design, deploy, administer, troubleshoot, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms
• Develop and tune detection rules, correlation logic, and threat-hunting queries while maintaining Cribl data pipelines
• Support incident response and SOC operations, including technical troubleshooting and knowledge transfer to SOC analysts

Required Qualifications

• Bachelor's degree in Information Technology, Information Security, or a related field, or 8+ years of relevant experience
• 5+ years of experience supporting large IT environments and/or system deployments
• Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR
• Experience with Cribl for data modeling, log pipeline design, and ingestion
• Proficiency in developing automation and response workflows using Python, Bash, or similar scripting languages