Security Architect - SIEM Engineer (Hybrid)
Job Description
Now Hiring: Security Architect – SIEM Engineer🚨
\n
- \n
- No C2C or Visa Transfer Candidates
- Must be located in or near Columbia, SC
- FULL CREDIT CHECK AND CRIMINAL BACKGROUND CHECK
- MUST OBTAIN AND RETAIN ANNUAL CJIS CERTIFICATION
\n
\n
\n
\n
\n
\n
We're seeking an experienced Security Architect – SIEM Engineer to join a large enterprise security team supporting a 24x7 Security Operations Center (SOC). This is an exciting opportunity to play a key role in designing, implementing, and optimizing enterprise-scale Palo Alto Cortex XSIAM and Cortex XDR environments while helping secure multiple state agencies.
\n
\n
You'll work alongside security architects, engineers, and SOC analysts to enhance detection engineering, incident response, automation, and security operations in a complex, multi-tenant environment.
\n
\n
The Ideal Candidate
\n
The ideal candidate is a hands-on SIEM and XDR expert with deep experience architecting, implementing, and administering Palo Alto Cortex XSIAM and Cortex XDR in large-scale, multi-tenant enterprise environments. You have a strong background supporting 24x7 SOC operations, developing advanced detection content, correlation rules, threat hunting queries, dashboards, and automated response playbooks that improve security visibility while reducing false positives. Experience with Cribl data modeling, log pipeline design, parsing, normalization, enrichment, and ingestion is highly valued. You are comfortable integrating telemetry from cloud, endpoint, identity, network, SaaS, Linux, Windows, and custom applications, while leveraging scripting languages such as Python or Bash to automate workflows. Beyond your technical expertise, you're a collaborative security professional who excels at documentation, mentoring analysts, troubleshooting complex security challenges, and continuously improving enterprise detection and response capabilities.
\n
\n
What You'll Be Doing
\n
- \n
- Design, implement, and optimize Palo Alto Cortex XSIAM & Cortex XDR
- Engineer detections, analytics, correlation rules, and threat-hunting content
- Build automation workflows, playbooks, and incident response processes
- Support multi-tenant onboarding, RBAC, dashboards, and reporting
- Optimize Cribl log pipelines, parsing, normalization, and enrichment
- Develop runbooks, SOPs, architecture documentation, and knowledge articles
- Partner with SOC analysts to improve security operations and incident response
\n
\n
\n
\n
\n
\n
\n
\n
\n
Must Have:
\n
- \n
- Palo Alto Cortex XSIAM & Cortex XDR engineering and administration
- Enterprise SIEM engineering in multi-tenant environments
- Detection engineering, threat hunting, and correlation rule tuning
- Playbook development and security automation
- Cribl data modeling and log pipeline optimization
- Python and/or Bash scripting
- Enterprise security architecture and incident response
\n
\n
\n
\n
\n
\n
\n
\n
\n
If you're passionate about building next-generation security operations and have experience with enterprise SIEM/XDR platforms, we'd love to hear from you!
\n
\n
Apply today or message me directly for more information.
\n
\n
#CyberSecurity #SecurityArchitect #SIEM #SOC #PaloAlto #CortexXSIAM #CortexXDR #Cribl #ThreatHunting #IncidentResponse #SecurityEngineering #InfoSec #CyberJobs #ColumbiaSC #Hiring #ITJobs #EnterpriseSecurity
\n
\n
The salary range for this position is $145,000 - $160,000.
\n
\n
TM Floyd & Company is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability.
\n
\n
We offer a generous array of benefits, depending on the length of assignment. We also offer a referral bonus of up to $1,000. Ask us for more details!
\n
\n
TM Floyd & Company participates in E-VERIFY.
\n
AAP, EEO
\n
26-00372