Job Description Job Role: Senior Cortex XSIAM SME 100% onsite- Calgary (8am-5pm) Required Skill Set Hands-on experience with cybersecurity platforms including Palo Alto Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, Red

Seal, and cloud security technologies.

Strong knowledge of SIEM, log management, security monitoring, threat detection, correlation rules, and incident analysis.

Experience integrating and troubleshooting security data sources, APIs, endpoint agents, OT/ICS telemetry, and cloud-native security services.

Proficiency in automation, scripting workflow optimization within Security Operations environments.

Positive understanding of AWS cloud services, cloud security controls, security architecture, and security technology lifecycle management.

Familiarity with AI security concepts, security analytics, security frameworks, compliance requirements, technical documentation, and operational reporting.

Roles and Responsibilities: Administer, maintain, and support security platforms including Cortex XSIAM/XDR, Wiz, Microsoft Defender, Trellix, Rapid7, Red

Seal, and associated security technologies.

Monitor platform health, investigate operational issues,



perform root cause analysis, and ensure service availability.

Trouble shoot and resolve platform integration, configuration, performance, and endpoint agent-related issues.

Develop, test, deploy, and maintain security detections, correlation rules, and analytics use cases.

Identify and implement automation and opportunities to improve operational efficiency and analyst productivity.

Support security requirements, integrations, and operationalization of AI-enabled security initiatives and technologies.

Assist with implementation and management of cloud security controls, monitoring solutions, and AWS security integrations.

Support platform upgrades, patching, maintenance activities, and technology lifecycle management initiatives.

Develop and maintain technical documentation, operational procedures, architecture diagrams, standards, and support runbooks.

Participate in cybersecurity testing exercises, knowledge transfer activities, audit support, and continuous improvement initiatives while providing mentoring and operational guidance to team members.

📌 Senior Cortex XSIAM SME Engineer (Calgary)
🏢 Astra North Infoteck
📍 Calgary