Senior XSIAM Detection Engineer

Summary

Join Red Canary's XSIAM Detection Engineering & Response team as a Senior XSIAM Detection Engineer. You will be responsible for configuring and managing a SIEM system, creating alarms and dashboards, automating playbooks, and analyzing customer alerts to improve their security posture. This role requires 3+ years of experience in SIEM administration, scripting/automation, and large enterprise environments, along with expertise in programming, networking, and systems administration. You will leverage your skills to uncover threats, develop advanced playbooks, build detection capabilities, and collaborate with customer support teams. Red Canary offers a competitive salary, bonus program, stock options, and a comprehensive benefits package including 100% paid medical, dental, and vision insurance, flexible time off, paid parental leave, and a flexible work environment.

Requirements

• 3+ years experience in Information Security SIEM administration, parser development, cybersecurity content development, creating queries, alerting, and log analysis (or similar analysis role)
• 3+ years experience in scripting/process automation
• 3+ years experience operating and supporting a large enterprise environment
• Experience with security configuration of operating systems, network devices, etc
• Demonstrated expertise with at least one programming/scripting language
• Demonstrated experience with securing all aspects of an enterprise
• Demonstrated expertise in understanding networking technologies and protocols
• Demonstrated systems administration experience with Windows and Linux/UNIX-based operating systems
• Participated in an on-call schedule responsible for responding to high-priority issues
• Must have a passion for technology and stay current with emerging security trends
• Excellent verbal & written communication and presentation skills
• Experience with new technology evaluations, software package selection, and buy vs. build analysis
• Advanced scripting – Python, Go, Javascript

Responsibilities

• Use Palo Alto’s XSIAM platform, source signal data, and external resources to uncover threats and tell the story of what occurred in a customer environment
• Develop advanced playbooks to reduce alert fatigue and maximize customer investment
• Build new detection capabilities into the XSIAM platform based on your research of new attack techniques
• Leverage previous security operations experience to enhance the XSIAM Detection Engineering & Response teams knowledge-base and expertise
• Initiate and undertake tasks of writing XQL logic in the XSIAM platform to improve operational workflows
• Actively engage with customer support teams to solve customer problems by fostering collaboration and gathering feedback on specific security concerns
• Help lead projects to improve collaboration between the customer and the XSIAM Detection Engineering & Response team

Preferred Qualifications

• Experience with Palo Alto XSIAM (or next-gen SIEM)
• Experience with AWS, Azure, GCP logging, and cloud technologies in general
• Experience with EDR and IAM technologies
• Familiarity with standard log formats from different systems: Windows/Linux/Cloud, etc
• API integration/automation experience
• Experience with process automation / at least one primary SOAR tool
• Experience working in a global organization

Benefits

• 100% Paid Premiums: Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period
• Health & Wellness - Access to mental health services, Employee Assistance Program and additional programs to incentivize healthy habits
• Fertility Benefits: All new hires are eligible for benefits as of their first day
• Flexible Time Off: Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays
• Paid Parental Leave- Full base pay to bond/care for your new child
• Pre-Tax Plans - Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses
• Flexible Work Environment- With 60% remote workforce, Canaries can work virtually from almost anywhere in the US
• Targeted base salary range: $115,360 - $137,000
• This role is eligible for participation in the company's bonus program
• This role is also eligible for a grant of stock options, subject to the approval of the company's board of directors