Security Architect (SIEM Engineer)
InterSources Inc. · Posted Nov 4, 2026
- Remote, United States +1 more
- Remote
- Contract
- 8+ years
Design, deploy, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms, support multi‑tenant SOC operations, develop SIEM playbooks, and maintain security telemetry pipelines.
Locations (2)
- Columbia, South Carolina, United States
- United States
Responsibilities
- Design, deploy, administer, optimize, and troubleshoot Palo Alto Cortex XSIAM and Cortex XDR platforms.
- Support multi‑tenant agency onboarding, tenant‑specific configurations, role‑based access controls, data segregation, dashboards, and reporting.
- Develop and tune detection rules, correlation logic, security analytics, threat‑hunting queries, watchlists, and alert suppression mechanisms to reduce false positives.
- Design and maintain Cribl log pipelines, including data modeling, routing, parsing, normalization, enrichment, filtering, replay, and ingestion.
- Onboard, integrate, and monitor security telemetry across cloud, endpoint, network, identity, SaaS, and enterprise application environments.