Skip to content

Open nowPosted yesterday

Senior SIEM Engineer

CAI160 open roles

Pay
$70 – $80 an hour
Where
PA-CLIENT-STATE
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior SIEM EngineerCAI · PA-CLIENT-STATE
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CAI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. CAI postings stay open a median of 6 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted yesterday

CAI median: 6 days open

The posting

Senior SIEM Engineer

Req number:

R8918

Employment type:

Full time

Worksite flexibility:

Remote

Who we are

CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary

The Senior SIEM Engineer will be responsible for designing, implementing, and optimizing Palo Alto Cortex XSIAM/XDR and Cribl solutions in a large-scale, multi-tenant 24x7 SOC environment, with expertise in detection engineering, security automation, threat hunting, log pipeline management, and incident response support.

Job Description

We are seeking a highly skilled and experienced Senior SIEM Engineer to join our IT team. This position will be full-time, remote, and is a contract position.

What You'll Do

  • Design, implement, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms
  • Support enterprise SIEM and XDR operations within a large-scale, multi-tenant security environment
  • Configure tenant onboarding, role-based access controls, data segregation, dashboards, reporting, and platform integrations
  • Develop and tune detection content, correlation rules, analytics, threat-hunting queries, watchlists, and alert suppression logic
  • Design and maintain security automation, playbooks, and incident response workflows
  • Support Cribl log management, including data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion
  • Integrate security platforms with ticketing, case management, notification, identity, and threat intelligence systems
  • Monitor platform health, ingestion performance, alert volumes, detection coverage, and operational metrics
  • Troubleshoot complex security platform issues and support Tier 1-3 SOC analysts during investigations and incident response activities.
  • Create and maintain runbooks, SOPs, architecture diagrams, technical documentation, and knowledge articles
  • Participate in a monthly on-call rotation supporting a 24x7 Security Operations Center (SOC)
  • Collaborate with security architects, engineers, analysts, and stakeholders to continuously improve security operations and services

What You'll Need

Required

  • Hands-on experience designing, implementing, administering, and supporting Palo Alto Cortex XSIAM and Cortex XDR.
  • Experience supporting SIEM platforms within large-scale, multi-tenant environments and 24x7 SOC operations
  • Strong background in detection engineering, threat hunting, correlation rule development, alert tuning, dashboards, and reporting.
  • Experience creating and managing security automation, playbooks, and response workflows
  • Hands-on experience with Cribl, including data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion
  • Experience developing integrations and automation using Python and Bash
  • Experience onboarding and troubleshooting cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application telemetry sources
  • Strong understanding of enterprise security architecture, incident response, networking, access controls, secure system design, and cybersecurity frameworks
  • Bachelor's degree in Information Technology, Information Security, or a related field; equivalent experience may be considered in lieu of a degree
  • Minimum five years of experience supporting large IT environments and/or enterprise system deployments
  • Ability to pass criminal background and credit checks and obtain/maintain CJIS certification

Preferred

  • Preferred certifications such as CISSP, Security+, GIAC, Palo Alto Cortex, Cribl, or other relevant cybersecurity certifications

Physical Demands

  • Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state, and local standards
  • Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc
  • Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

Reasonable accommodation statement

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to [email protected] or (888) 824 – 8111.

EEO Statement

It is the policy of Computer Aid, Inc.(CAI) not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. It is also the policy of CAI to take affirmative action to employ and to advance in employment, all persons regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.

Employees and applicants of CAI will not be subject to harassment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. Additionally, retaliation, including intimidation, threats, or coercion, because an employee or applicant has objected to discrimination, engaged or may engage in filing a complaint, assisted in a review, investigation, or hearing or have otherwise sought to obtain their legal rights under any Federal, State, or local EEO law is prohibited.

$70-$80 per hour

The pay range for this position is listed above. Exact compensation may vary based on several factors, including location, experience, and education. Benefit packages include medical, dental, and vision insurance, as well as 401k retirement account access. Employees in this role may also be entitled to paid sick leave and/or other paid time off as provided by applicable law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CAI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on CAI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    CAI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.