IT - ADMIN - Security Architect - Consultant - SIEM Engineer

Security Architect - Consultant (SIEM Engineer)
Job Type: Contract
Client: State of South Carolina
Job Details
Position: Security Architect - Consultant (SIEM Engineer)
Reason for Opening: New Position to assist the Division of Information Security (Client)
Duration: 12 Months
Possibility for Extension: Yes
Work Location: 100% Remote
Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.
Candidate Location:
No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibility of the resource, regardless of the frequency of onsite work.
Interview Process:
1 2 Rounds of Virtual Interviews. In-person availability for interviews preferred.
Submission Deadline:
07/22 at 5:00 PM EST
Submission Requirements

• SC Cover Sheet (Attached)
• Valid Right to Represent (RTR)
• Candidate Resume with Full Legal First Name and Last Name

• Withdrawn candidates will not be permitted to be replaced.
• If using a sub-vendor, only one level deep is allowed.
• Please submit the Sub Vendor Usage Form if applicable.

• Bachelor's Degree in Information Technology, Information Security, or a related field. (8+ years of relevant work experience may be substituted in lieu of education.)
• 5+ years of experience supporting large IT environments and/or system deployments.
• Hands-on experience with Palo Alto Cortex, Cortex XSIAM, and Cortex XDR design, implementation, administration, and operational support.
• Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center (SOC) operations.
• Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic.
• Experience creating and managing complex playbooks.
• Experience with CRIBL data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion.
• Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash.
• Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design, and industry-standard cybersecurity frameworks.

• CISSP, Security+, or GIAC certification.
• Palo Alto Cortex, Cribl, or other relevant SIEM/Security Platform certification.
• Hands-on experience operating Cortex XSIAM and Cortex XDR in a large, multi-tenant environment.
• Hands-on Cribl administration, data modeling, and log pipeline optimization experience.
• Experience supporting Tier 1 Tier 3 SOC Analysts, threat hunting, incident response, and 24x7 operational handoffs.
• Familiarity with industry-standard security and compliance frameworks.
• Experience developing playbooks, runbooks, procedures, and technical documentation.