Overview:
Required Skills
Bachelor's Degree in an Information Technology or Information Security related field; 8+ years of relevant work may be substituted in lieu of education
5+ years of experience in supporting large IT environments and/or system deployments
Palo Alo Cortex XSIAM and Cortex XDR Design, implementation, administration, and operational support
Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations
CRIBL Data Modeling, Log Pipeline Design, Parsing, Normalization, Enrichment, Routing and Ingestion experience
Experience developing automation, integrations, playbooks and response workflows using scripting languages such as Python and Bash
Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows and custom application sources
Enterprise security architecture, incident response, networking, access control, secure system design and industry-standard cybersecurity frameworks
Preferred Skills
CISSP, Security+ or GIAC certification
Palo Alto Cortex, Cribl or other relevant SIEM/security platform certification
Skills:
5+ years of experience in supporting large IT environments and/or system deployments Palo Alo Cortex XSIAM and Cortex XDR Design, implementation, administration, and operational support
