SIEM Subject Matter Expert (Palo Alto Networks Cortex XSIAM) - Contract or Perm
NCS Australia · Posted Nov 9, 2026
- Sydney, New South Wales, Australia
Experienced SIEM Subject Matter Expert with deep Palo Alto Networks Cortex XSIAM expertise for a Sydney based role.
Responsibilities
- Take end-to-end ownership of the enterprise SIEM data pipeline
- Onboard diverse enterprise log sources, leading log parsing, field extraction, data modeling, and normalization
- Design, build, and maintain automated onboarding tooling
- Manage enrichment pipelines that append critical context to raw log events
- Fine-tune SIEM configurations and detection content to reduce false positives
Requirements
- Nice to have: Palo Alto Networks certifications (PCSAE or equivalent Cortex credentials)
- Nice to have: XQL or similar log query languages
- Nice to have: MITRE ATT&CK framework familiarity
- Nice to have: adjacent SIEM technologies (Splunk, Microsoft Sentinel, IBM QRadar)
- Nice to have: enterprise SOC experience