Job Description

Salary: $90,000 - 130,000 per year Requirements:

• At least 5 years of experience in security operations, detection engineering, or SIEM/SOAR engineering.
• Hands-on experience with Palo Alto Networks Cortex XSIAM, or strong XDR/XSOAR experience with the ability to ramp up quickly on XSIAM.
• Strong knowledge of SIEM/XDR concepts, log analytics, incident response and threat detection workflows, and automation and orchestration use cases.
• Proficiency with XQL, KQL, SPL, or a similar security query language.
• Experience integrating endpoint, network, cloud, and identity data sources.
• Strong scripting skills; Python is preferred.
• Experience operating security platforms at enterprise scale.
• Preferred experience with endpoint security tools such as Cortex XDR, Defender, or CrowdStrike; cloud security telemetry from AWS, Azure, or Google Cloud Platform; and identity and access logs such as AD, Azure AD, or IAM.
• Familiarity with MITRE ATT&CK and threat intelligence frameworks.
• Experience supporting a 24/7 SOC or global security operations team.
• Bachelors degree in computer science, information assurance, MIS, or equivalent industry experience.
• Palo Alto Networks Certified XSIAM Engineer or Analyst certification is preferred; other industry certifications, such as CEH or CISM, are a plus.

• Design, deploy, and maintain Cortex XSIAM detections, correlations, and analytics across endpoint, network, cloud, and identity data.
• Develop and refine detection logic to reduce noise and improve true-positive rates; optimize data ingestion, rules, and platform performance.
• Create and maintain custom detections using XQL, and conduct proactive threat hunting and investigations with XSIAM analytics and telemetry.
• Convert threat intelligence and adversary techniques into actionable detections aligned with MITRE ATT&CK.
• Design and maintain automated response playbooks to accelerate incident containment and remediation.
• Integrate XSIAM with enterprise identity, EDR, ticketing, cloud, and network security tools.
• Improve mean time to respond through automation and orchestration.
• Collaborate with SOC analysts, incident responders, and engineering teams on investigations and response activities.
• Support post-launch enhancements, backlog grooming, and technical debt reduction.
• Provide technical guidance and mentorship to engineers and analysts.

• AWS
• Azure
• Cloud
• IAM
• Support
• Network
• Python
• Security

More:

We are hiring a Senior Cyber Security Engineer based in Wilmington, Delaware, for a Monday–Friday, 8:00 a.m.–5:00 p.m. Eastern schedule with a hybrid or remote arrangement. You will help advance detection, response, and automation across our enterprise security environment, working with telemetry from endpoint, network, cloud, and identity systems alongside SOC analysts, incident responders, and fellow engineers. We are CSC, a global business, legal, and financial services company headquartered in Wilmington, with more than 8,000 colleagues and operations in over 140 jurisdictions. Our team focuses on innovation and client service, and we foster a diverse, growth-oriented workplace where colleagues can develop global careers. We offer comprehensive benefits, including annual leave, tuition reimbursement, referral bonuses, and performance-based success-sharing bonuses or commission plans; work arrangements depend on business needs and local regulations.

last updated 42 week of 2026

Job Tags

Similar Jobs