Security Architect

Focused on Palo Alto Cortex XSIAM and Cortex XDR, the remote Security Architect will design, implement, and optimize security solutions while providing operational support to a 24x7 Security Operations Center, assisting with multi-tenant environments and incident response. Key responsibilities Plan, design, deploy, and administer enterprise SIEM and XDR capabilities, including configuration and troubleshooting of Palo Alto Cortex platforms Assist in the operational support of log management and security data pipelines, ensuring optimal performance and compliance Develop, test, and maintain automated response workflows and operational documentation for incident response and analyst support Required qualifications Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR design and operational support Experience engineering SIEM capabilities for multi-tenant environments and 24x7 SOC operations Proficiency in Cribl data modeling and log pipeline design Experience in automation and scripting using languages such as Python and Bash Bachelor's degree in Information Technology or Information Security, with eight years of relevant work preferred