Role: Cortex XSIAM SME

100% onsite- Calgary (8am-5pm)

Required Skill Set

- Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and cloud security technologies.
- Solid knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.
- Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.
- Proficiency in automation, scripting workflow optimization within Security Operations environments.
- Good understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.
- Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities:

- Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, RedSeal, and associated security technologies.
- Monitor platform health, investigate operational issues, perform root cause analysis,



and ensure service availability.
- Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.
- Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.
- Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.
- Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.
- Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.
- Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.
- Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.
- Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.

📌 Cortex XSIAM SME- 100% onsite in Calgary
🏢 Q1 Technologies
📍 Calgary