Security Operations Analyst

📋 Description

• Design, deploy, and maintain log source integrations within Palo Alto Cortex XSIAM and XSOAR
• Develop and continuously improve SOAR playbooks for automated incident triage, enrichment, and
• Manage detection rules, correlation policies, dashboards, and alert thresholds while optimizing
• Monitor SIEM platform health, connector availability, API rate limits, and log ingestion capacity.
• Maintain technical documentation, integration runbooks, playbook specifications, and change records
• Administer and optimize the CrowdStrike Falcon platform, including endpoint sensor deployment

🎯 Requirements

• Hands-on experience in Security Operations, SIEM/SOAR engineering, security monitoring, or a
• Strong technical expertise in SIEM and SOAR platforms, particularly Palo Alto Cortex XSIAM and
• Experience designing and maintaining log integrations, data parsing, normalization, detection
• Practical experience administering endpoint detection and response platforms, particularly
• Strong understanding of cloud security logging and monitoring across AWS, Microsoft Azure, and
• Familiarity with AWS security services, including GuardDuty, Security Hub, CloudTrail, VPC Flow

🎁 Benefits

• Opportunity to work with modern enterprise cybersecurity technologies and platforms.
• Hands-on exposure to Palo Alto Cortex XSIAM/XSOAR and CrowdStrike Falcon.
• Experience working across multi-cloud security environments, including AWS, Azure, and GCP.
• Opportunity to contribute to advanced threat detection, automated incident response, and security
• Collaboration with international Security Operations and IT teams.
• Exposure to complex enterprise security environments and evolving cybersecurity challenges.