Responsibilities
- Lead the initiation and planning phase for XSIAM implementations, outlining project scope, objectives, schedules, and resource needs.
- Perform thorough architectural discovery sessions to grasp client environments, security needs, and integration points for XSIAM.
- Manage and directly engage in deploying Cortex XSIAM infrastructure, including complex multi-tenant setups with child tenants.
- Offer expert guidance and practical support for data source integration, ensuring efficient and precise ingestion of security telemetry into XSIAM.
- Specialize in tuning endpoints within the XSIAM ecosystem to enhance data quality and minimize noise for effective threat detection.
- Develop and implement sophisticated correlation rules to identify advanced threats and streamline alert generation.
- Utilize and configure attack surface management capabilities within XSIAM to give clients comprehensive visibility into their digital attack surface.
- Design, develop, and refine data models and parsers to ensure accurate and actionable data representation within XSIAM.
- Collaborate with clients to identify opportunities for alert automation and playbook implementation, based on discovery and potentially supported by extended expertise.
- Advise on and implement best practices for threat intelligence management within XSIAM, integrating various threat intelligence sources for improved detection.
- Work with clients to define requirements for custom widgets and reports, and contribute to their development as needed, with further definition and potential delivery through extended expertise.
- Lead and contribute to SOC transformation initiatives, using XSIAM to modernize security operations centers, streamline workflows, and enhance overall security posture.
- Produce high-quality, comprehensive documentation throughout the project lifecycle, including architectural designs, configuration guides, and operational runbooks.
Benefits
- Free training for all consultants who wish to expand their knowledge and profiles while with us.
