Security Architect - Consultant

This contract role focuses on SIEM engineering in support of large-scale, multi-tenant security operations and a 24x7 SOC environment. Responsibilities include planning, designing, implementing, administering, and optimizing Palo Alto Cortex XSIAM and Cortex XDR platforms; developing and tuning detections, correlation rules, analytics, dashboards, reporting, and alert suppression logic; building and managing complex playbooks, automation, integrations, and response workflows using Python and Bash; supporting Cribl data modeling and log pipeline design, parsing, normalization, enrichment, routing, and ingestion; onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources; and contributing to enterprise security architecture, incident response, operational support, and continuous improvement activities. This is a remote contract position with collaboration across security operations and engineering functions.

Contract Details

• Type: Contract
• Duration: 12 months
• Work Type: Remote
• Location: Columbia, SC
• Estimated Hourly Compensation: $79.5 - $87.5/hour
• Residency Requirement: Candidate must be located within a commutable distance to Columbia, SC
  

Required Skills

• Eight years relevant work experience in lieu of education (8 years)
• Palo Alto Cortex XSIAM and XDR design and administration
• SIEM engineering for multi-tenant and 24x7 SOC environments
• Complex playbook creation and management
• Cribl data modeling and log pipeline design
• Enterprise security architecture and incident response knowledge
• Five years supporting large IT environments or system deployments (5 years)
• Detection and correlation rule development and tuning
• Automation and integrations using Python and Bash
• Telemetry onboarding and troubleshooting across security data sources
• Bachelor's degree in IT or Information Security
  
  

Preferred Skills

• Cribl administration and log pipeline optimization
• Support for SOC analysts and 24x7 operational handoffs
• Security frameworks and technical documentation
• Palo Alto Cortex, Cribl, or relevant SIEM certification
• CISSP, Security , or GIAC certification
• Cortex XSIAM and XDR in large multi-tenant environments
  

*Candidates must be legally authorized to work in the United States without employer sponsorship now or in the future. Resumes must clearly demonstrate required experience. This opportunity is open to direct hires only; Corp-to-Corp (C2C) and agency submittals will not be considered.