XSIAM Administrator & Automation Engineer
About The Role
We are looking for an XSIAM Administrator & Automation Engineer to own the day-to-day administration, data onboarding, detection engineering and automation strategy of our Cortex XSIAM (Extended Security Intelligence and Automation Management) platform. This role sits at the intersection of security operations engineering and AI-driven automation — you will design, build, and continuously improve the detection content, playbooks, and AI-assisted workflows that let our SOC operate at machine speed. You will work closely with multiple security operations team such as incident response, threat hunt, insider risk to ensure XSIAM is correctly configured, fully onboarded, and increasingly autonomous in how it triages, investigates, and responds to threats.

Key Responsibilities
Platform Administration
- Administer and maintain the Cortex XSIAM tenant: user roles, RBAC, licensing, health monitoring, and platform upgrades.
- Onboard and normalize recent data sources (logs, endpoint telemetry, cloud, identity, network)



using XDM (Cortex Data Model) mapping and parsing rules.
- Manage integrations and content packs, including third-party connectors, brokers, and collectors.
- Tune detection content — BIOCs, correlation rules, analytics, and incident scoring — to reduce noise and improve fidelity.
- Monitor platform performance, data ingestion costs, and storage tiering, and troubleshoot ingestion or parsing failures.

Logging and Detection Engineering
- Onboard logs directly from sources or via secure data pipeline management solution such as Cribl
- Extend detection engineering scope by creating corelation, analytics rule using XSIAM jupyter notebooks.
- Support detection engineering and threat-hunting initiatives with automation and XQL query development.

Automation & Playbook Engineering
- Design, build, and maintain automation playbooks (XSOAR/XSIAM playbook engine) to automate alert triage, enrichment, containment, a

📌 Security Engineer II (Gurugram)
🏢 SteerLean Consulting
📍 Gurugram