Role & responsibilities :

- Creates, updates, tests, and deploys content.

- Updates are measured against the MITRE framework.

- Work with the security operations team to ensure that the SIEM system is configured and optimized to detect and respond to security incidents.

- Develop and maintain SIEM dashboards, alerts, and reports. Create and maintain SIEM use cases to detect specific security threats.

- Collaborate closely with cross-functional teams to ensure the effectiveness of detection mechanisms. (SOC Analyst, Cyber Threat Intel, Cyber Threat Hunting, SOC Management)

- Integrate content with various platforms and ensure seamless delivery aligned with business objectives and industry best practices.

- Monitor and analyze (XDR/SIEM/SOAR) content performance metrics to drive continuous improvement, troubleshooting and documenting.

- Continuously monitor the threat landscape and stay updated with the latest attack techniques and tactics.

- Product & Industry Cert : CISSP/OEM certifications/ Security+ etc..

- Domain exp : XDR, SIEM and SOAR Automation

Preferred Professional and Technical Expertise :

- Palo-alto XIAM Certification is highly desirable.

- Palo-alto XSOAR experience & exposure is desired

- Large scale SOC-SIEM Migration experience

- Large scale data sources integration

- Palo-alto XDR, XSOAR Experience is good to have.