Job Summary

We are looking for an XSIAM Administrator & Automation Engineer to own the day-to-day administration, data onboarding, detection engineering and automation strategy of our Cortex XSIAM (Extended Security Intelligence and Automation Management) platform. This role sits at the intersection of security operations engineering and AI-driven automation - you will design, build, and continuously improve the detection content, playbooks, and AI-assisted workflows that let our SOC operate at machine speed. You will work closely with multiple security operations team such as incident response, threat hunt, insider risk to ensure XSIAM is correctly configured, fully onboarded, and increasingly autonomous in how it triages, investigates, and responds to threats.
Responsibilities
- Platform Administration: Administer and maintain the Cortex XSIAM tenant: user roles, RBAC, licensing, health monitoring, and platform upgrades.
- Platform Administration: Onboard and normalize current data sources (logs, endpoint telemetry, cloud, identity, network) using XDM (Cortex Data Model)



mapping and parsing rules.
- Platform Administration: Manage integrations and content packs, including third-party connectors, brokers, and collectors.
- Platform Administration: Tune detection content - BIOCs, correlation rules, analytics, and incident scoring - to reduce noise and improve fidelity.
- Platform Administration: Monitor platform performance, data ingestion costs, and storage tiering, and troubleshoot ingestion or parsing failures.
- Logging and Detection Engineering: Onboard logs directly from sources or via secure data pipeline management solution such as Cribl
- Logging and Detection Engineering: Extend detection engineering scope by creating corelation, analytics rule using XSIAM jupyter notebooks.
- Logging and Detection Engineering: Support detection engineering and threat-hunting initiatives with automation and XQL query development.
- Automation & Playbook Engineering: Design, b

📌 Security Engineer II (Gurugram)
🏢 SteerLean
📍 Gurugram