Full-Time Professional Services Consultant, XSIAM

• As a SIEM Consultant for Cortex XSIAM, you will assist customers with log migration and detection strategies.
• Work closely with the technical lead to ensure successful log onboarding into XSIAM, adhering to industry best practices.
• Devise detection strategies to fortify customer defenses against threats, including correlation rule design and implementation.

Your Impact

• Collaborate with the technical lead on log ingestion strategy.
• Contribute to detection strategies based on industry best practices.
• Articulate a step-by-step process for high-quality log source ingestion.
• Monitor and optimize log sources for performance.
• Create correlation rules and fine-tune log sources.
• Serve as the SME in SIEM, correlation, and log source ingestion.
• Serve as a trusted advisor, offering guidance in optimizing Cortex XSIAM.
• Leverage SIEM and SOC knowledge to assess customer needs and provide tailored recommendations.
• Collaborate to understand customer challenges and translate them into actionable steps.
• Identify opportunities to enhance analyst alert handling through automation.
• Foster collaboration to drive product adoption and produce technical documentation.
• Travel to customer meetings (up to 10%).

Your Experience

• Exceptional communication and presentation skills.
• 6+ years of SIEM deployment and integration experience.
• Proficiency in event collection, log management, event management, compliance automation, and identity monitoring using SIEM platforms.
• Ability to develop correlation and detection rules in SIEM systems.
• Familiarity with SIEM technologies like Splunk and IBM QRadar.
• Experience in consultative services in cybersecurity, particularly in SIEM and SOC domains.
• Strong expertise in Regular Expressions (Regex).
• Skill in understanding logs.
• Knowledge of SIEM status reporting.
• Understanding of Security Analysis & Response.
• Proficient in creating technical design documentation.
• 4 years of experience with SOC tooling and processes.
• Relevant bachelor's degree or industry qualifications (CISSP, GIAC, etc.) is a plus.

What is the last date for applying to the job?

Which countries are accepted for this remote job?