ZipRecruiter

Log In

1

On Call Cortex Xdr Jobs (NOW HIRING)

VIVA USA INC

Security Architect / SIEM Engineer

SC · On-site +1

This position is 100% remote and will participate in a monthly on-call rotation supporting a 24x7 ... This contractor will be primarily focused on Cortex XSIAM and Cortex XDR engineering ...

SMART TECH SKILLS LLC

SIEM Engineer

Tallahassee, FL · Remote

... on-call rotation to support the 24x7 SOC. Key Responsibilities SIEM & XDR Platform Engineering • Plan, design, deploy, administer, and optimize Palo Alto Cortex XSIAM and Cortex XDR platforms ...

Cyderes

Security Analyst I

Bentonville, AR · On-site

Participate in an after-hours on-call rotation as an Incident Controller. * Scope customer security ... Have experience using Endpoint Detection and Response (EDR) solutions such as Cortex XDR ...

Ascend Learning

Senior Security Engineer

Leawood, KS · On-site +1

$111K - $152K/yr

Act as a senior incident responder, participating in the Information Security on-call rotation and ... XDR, or SOAR (Splunk, Google SecOps, Cortex XSOAR, TORQ, CrowdStrike Falcon, SentinelOne, etc.

All JobsOn Call Cortex Xdr Jobs

On Call Cortex Xdr information

See salary details

$73.5K

$122K

$164K

How much do on call cortex xdr jobs pay per year?

As of Jul 25, 2026, the average yearly pay for on call cortex xdr in the United States is $122,008.00, according to ZipRecruiter salary data. Most workers in this role earn between $103,000.00 and $141,000.00 per year, depending on experience, location, and employer.
What are the most commonly searched types of Cortex Xdr jobs? The most popular types of Cortex Xdr jobs are:
On Call Cortex Xdr jobs near you
Cortex XSIAM & XDR Engineer / SIEM Architect

Cortex XSIAM & XDR Engineer / SIEM Architect

HTC Global Services

Columbia, SC • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

Job description

Job Title: Senior SIEM Engineer (Palo Alto Cortex XSIAM/XDR)
Overview / Summary
The SIEM Engineer will support the Department of Administration's Division of Information Security by designing, implementing, maintaining, and optimizing Palo Alto Cortex XSIAM and Cortex XDR in a large-scale, multi-tenant security environment. This role works closely with a large enterprise security team and a 24x7 Security Operations Center (SOC) to enhance SIEM, XDR, detection, response, and log management capabilities supporting multiple state agencies.
Key Responsibilities
  • Plan, design, deploy, administer, and support Palo Alto Cortex XSIAM and Cortex XDR platforms.
  • Configure, optimize, troubleshoot, and maintain enterprise SIEM and XDR capabilities.
  • Support multi-tenant agency onboarding, tenant-specific configurations, role-based access controls, data segregation, dashboards, and reporting.
  • Develop and tune detections, correlation rules, analytics, threat-hunting queries, watchlists, suppression logic, and false-positive reduction.
  • Assist with Cribl data modeling, log pipeline design, routing, parsing, normalization, enrichment, filtering, replay, and ingestion.
  • Support onboarding and health monitoring of cloud, endpoint, network, identity, SaaS, and custom application telemetry.
  • Optimize log volume, retention, performance, and cost while maintaining security and compliance requirements.
  • Develop, test, deploy, and maintain automated response workflows and playbooks for enrichment, triage, containment, escalation, notifications, case management, and incident response.
  • Create and maintain runbooks, standard operating procedures, escalation matrices, troubleshooting guides, architecture diagrams, data-flow documentation, use-case catalogs, and analyst knowledge articles.
  • Support Tier 1 through Tier 3 SOC analysts through platform troubleshooting, detection tuning, threat hunting, technical escalation, knowledge transfer, and shift handoffs.
  • Monitor and report on ingestion health, platform availability, alert volumes, detection coverage, false positives, service levels, mean time to detect, mean time to respond, and tenant-specific operational metrics.
  • Ensure high availability, resilience, backup, recovery, lifecycle management, and controlled change processes for SIEM, XDR, and supporting log pipeline services.
  • Collaborate with security architects, engineers, analysts, and agency stakeholders to align solutions with business goals, industry-standard frameworks, regulatory requirements, and organizational risk tolerance.
  • Participate in a monthly on-call rotation supporting the 24x7 SOC.

Required Qualifications
  • Hands-on experience with Palo Alto Cortex XSIAM and Cortex XDR design, implementation, administration, and operational support.
  • Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations.
  • Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic.
  • Strong experience creating and managing complex playbooks.
  • Experience with Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
  • Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash.
  • Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources.
  • Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design, and industry-standard cybersecurity frameworks.
  • Bachelor's degree in Information Technology, Information Security, or a related field; eight years of relevant work experience may be substituted in lieu of education.
  • Five years of experience supporting large IT environments and/or system deployments.
  • Must successfully pass:
    • Full credit check
    • Criminal background check
    • 7-year background check and credit history check
    • Driving record (MVR)
    • 10-panel drug screen
    • E-Verify
    • SLED check
  • Must obtain and maintain annual CJIS certification.

What Makes HTC A Great Place To Build Your Future
HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you'll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You'll have long-term opportunities to grow your career and develop skills in the latest emerging technologies.
At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks.
Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected.
#LI-SK9 #LI-Remote #Hiring

Apply