Senior Cortex XSIAM SME Engineer

Job Role: Senior Cortex XSIAM SME

100% onsite- Calgary (8am-5pm)

Required Skill Set

Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR Wiz Microsoft Defender Trellix Rapid7 RedSeal and cloud security technologies.

Strong knowledge of SIEM log management security monitoring threat detection correlation rules and incident analysis.

Experience integrating and troubleshooting security data sources APIs endpoint agents OT/ICS telemetry and cloud-native security services.

Proficiency in automation scripting workflow optimization within Security Operations environments.

Good understanding of AWS cloud services cloud security controls security architecture and security technology lifecycle management.

Familiarity with AI security concepts security analytics security frameworks compliance requirements technical documentation and operational reporting.

Roles and Responsibilities:

Administer maintain and support security platforms including Cortex XSIAM/XDR Wiz Microsoft Defender Trellix Rapid7 RedSeal and associated security technologies.

Monitor platform health investigate operational issues perform root cause analysis and ensure service availability.

Trouble shoot and resolve platform integration configuration performance and endpoint agent-related issues.

Develop test deploy and maintain security detections correlation rules and analytics use cases.

Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.

Support security requirements integrations and operationalization of AI-enabled security initiatives and technologies.

Assist with implementation and management of cloud security controls monitoring solutions and AWS security integrations.

Support platform upgrades patching maintenance activities and technology lifecycle management initiatives.

Develop and maintain technical documentation operational procedures architecture diagrams standards and support runbooks.

Participate in cybersecurity testing exercises knowledge transfer activities audit support and continuous improvement initiatives while providing mentoring and operational guidance to team members.