ZipRecruiter

Log In

1

Cortex Xdr Jobs in Columbia, SC (NOW HIRING)

All JobsCortex Xdr JobsCortex Xdr Jobs in Columbia, SC

Cortex Xdr information

See Columbia, SC salary details

$68K

$112.9K

$151.7K

How much do cortex xdr jobs pay per year?

As of Sep 6, 2026, the average yearly pay for cortex xdr in Columbia, SC is $112,874.00, according to ZipRecruiter salary data. Most workers in this role earn between $95,300.00 and $130,400.00 per year, depending on experience, location, and employer.

What is a Cortex XDR?

A Cortex XDR job typically involves working with Palo Alto Networks' Cortex XDR platform to detect, investigate, and respond to cybersecurity threats. Professionals in this role analyze security events, manage endpoint protection, and configure security policies to prevent breaches. They may also work with automation tools, threat intelligence, and forensic analysis to enhance an organization's security posture. Strong knowledge of SIEM, EDR, and incident response methodologies is often required.

What does a Cortex XDR specialist do?

A typical day for a Cortex XDR Specialist involves proactively monitoring security alerts, investigating suspicious activities, and responding to potential incidents using the Cortex XDR platform. Collaboration is frequent, as you’ll work closely with incident response teams, IT staff, and sometimes end users to gather insights and implement mitigation strategies. You may also spend time tuning security policies, preparing threat reports, or participating in tabletop exercises to ensure ongoing readiness. The role is dynamic and requires a balance of technical investigation and clear communication to help protect the organization’s digital assets.

What are the key skills and qualifications needed to thrive in the Cortex XDR position?

To excel as a Cortex XDR Specialist, you need a deep understanding of cybersecurity principles, threat detection, and incident response, often backed by a degree in information security or computer science. Familiarity with Palo Alto Networks Cortex XDR platform, SIEM tools, and certifications such as CISSP or PCNSE are highly valued. Strong analytical thinking, attention to detail, and effective communication skills are essential for interpreting data and collaborating with IT teams. These competencies ensure prompt identification and remediation of security threats, maintaining the organization's cyber resilience.

What are the most commonly searched types of Cortex Xdr jobs in Columbia, SC?

The most popular types of Cortex Xdr jobs in Columbia, SC are:

What are popular job titles related to Cortex Xdr jobs in Columbia, SC?

For Cortex Xdr jobs in Columbia, SC, the most frequently searched job titles are:

What job categories do people searching Cortex Xdr jobs in Columbia, SC look for?

The top searched job categories for Cortex Xdr jobs in Columbia, SC are:

What cities near Columbia, SC are hiring for Cortex Xdr jobs?

Cities near Columbia, SC with the most Cortex Xdr job openings:

Cortex Xdr jobs near you
Infographic showing various Cortex Xdr job openings in Columbia, SC as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $112,874 per year, or $54.3 per hour.

SIEM Engineer - Contract - Remote (Onsite in SC if required)

SUNSHINE ENTERPRISE USA LLC

Columbia, SC • On-site, Remote

Contractor

Re-posted 22 days ago

Job description


Job Title: SIEM Engineer
Location: 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.
Interview Process: 1-2 Rounds of Virtual Interviews. In person availability for interviews preferred.
Duration: 12 MonthsEmployment Type: ContractExperience Required: 10+ Years
Candidate location: No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibility of the resource no matter the frequency of onsite work.
Project Scope:
We are seeking an experienced Security Architect Consultant - SIEM Engineer to support the Department of Administration's Division of Information Security. This role is focused on the design, implementation, administration, optimization, and operational support of Palo Alto Cortex XSIAM and Cortex XDR in a large-scale, multi-tenant enterprise security environment.
The successful candidate will work alongside enterprise security architects, engineers, and a 24x7 Security Operations Center (SOC) team to enhance SIEM, XDR, detection engineering, automation, incident response, and security monitoring capabilities across multiple state agencies. This role also provides secondary support for Cribl data pipelines, log management, and telemetry onboarding.
Key Responsibilities:
• Design, implement, configure, and maintain Palo Alto Cortex XSIAM and Cortex XDR platforms.
• Support multi-tenant SIEM environments, including tenant onboarding, role-based access, data segregation, dashboards, and reporting.
• Develop and optimize: Detection rules, Correlation rules, Analytics, Threat hunting queries, Watchlists, Alert suppression logic
• Design and manage Cribl log pipelines, including: Data modeling, Parsing, Normalization, Enrichment, Routing, Filtering, Replay, Log ingestion
• Integrate telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom applications.
• Develop and maintain automated playbooks and response workflows using Python and Bash.
• Support incident response, threat hunting, and SOC operations.
• Create and maintain: Runbooks, SOPs, Architecture diagrams, Data flow documentation, Knowledge articles
• Support Tier 1-Tier 3 SOC analysts through troubleshooting, tuning, and knowledge transfer.
• Monitor SIEM health, ingestion, availability, detection coverage, false positives, MTTD, MTTR, and operational metrics.
• Ensure platform resilience, backup, recovery, lifecycle management, and change control.
• Collaborate with security architects, engineers, analysts, and business stakeholders to improve enterprise security capabilities.
Required Skills & Experience:
  • Hands-onexperience with Palo Alto Cortex XSIAM and Cortex XDR architecture, implementation, administration, and operational support.
  • Experiencesupporting enterprise SIEM platforms within large multi-tenantenvironments.
  • Experiencesupporting 24x7 Security Operations Centers (SOC).
  • Strongdetection engineering experience including:
    • Correlationrules
    • Threathunting
    • Analytics
    • Dashboards
    • Alerttuning
    • False-positivereduction
  • Hands-on Cribl administration including:
    • Datamodeling
    • Logpipeline design
    • Parsing
    • Normalization
    • Enrichment
    • Routing
    • Ingestion
  • Experiencedeveloping automation using:
    • Python
    • Bash
  • Experienceonboarding cloud, endpoint, network, identity, SaaS, Windows, Linux, andcustom application telemetry.
  • Strongknowledge of:
    • Enterprisesecurity architecture
    • Incidentresponse
    • Securesystem design
    • Networking
    • Identity& Access Management
    • Cybersecurityframeworks

Preferred Skills:
• Excellent written and verbal communication skills.
• Strong ability to create: Business Requirements Documents (BRD), Functional Requirements Documents (FRD), Use Cases, Process Documentation
• Experience gathering requirements through stakeholder interviews, policy documents, regulations, and business rules analysis.
• Knowledge of business modeling techniques and graphical process flow tools.
• Ability to communicate effectively with: Executive management, Business users, Project managers, Technical teams, External stakeholders
Education
Bachelor's degree in Information Technology, Information Security, Computer Science, or related field.
Eight (8) years of relevant experience may be substituted for the degree requirement.
Minimum five (5) years supporting large enterprise IT environments or system deployments.
Preferred Certifications
  • CISSP
  • Security+
  • GIAC
  • Palo AltoCortex Certification
  • CriblCertification
  • Otherrelevant SIEM or cybersecurity certifications

Apply