Senior Cortex XSIAM SME Engineer

2 days ago

Calgary AB, Calgary Census Division, AB; Alberta, Canada Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision! Full-time

  • Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.
  • Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.
  • Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.
  • Proficiency in automation, scripting workflow optimization within Security Operations environments.
  • Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.
  • Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

  • Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.
  • Monitor platform health, investigate operational issues, perform root cause analysis, and ensure service availability.
  • Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.
  • Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.
  • Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.
  • Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.
  • Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.
  • Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.
  • Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.
  • Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.
#J-18808-Ljbffr