{"schemaVersion":"jobsearcher.job.v1","id":"014d4fbce5a238942599bf49","url":"https://jobsearcher.com/jobs/014d4fbce5a238942599bf49","canonicalUrl":"https://jobsearcher.com/jobs/014d4fbce5a238942599bf49","title":"Security Operations Engineer","description":"Position Summary\r\nOur client is seeking a Security Operations Engineer to design, deploy, and operationalize Cortex XSIAM as the foundational platform that powers our Aegis Managed Detection & Response (MDR) practice.\r\nPosition Details\r\nPosition: Security Operations Engineer\r\nType: Direct hire\r\nLocation: Remote\r\nThis is not a traditional SOC analyst or incident responder role. Instead, this position is focused on engineering the security operations platforms that our customers and partners rely on. This includes building the telemetry pipelines, detections, automations, and integrations required for a modern, scalable MDR service or successful customer SOC buildout.\r\nYou will work closely with company engineering, customer stakeholders, and be a part of the SOC. This role's primary responsibility is to ensure Cortex XSIAM is implemented in a way that enables high-fidelity detection, efficient response, and long-term operational success.\r\nExisting experience using Cortex is preferred; however training is provided and is mandatory.\r\nKey Responsibilities\r\nLead end-to-end deployment and implementation of Cortex XSIAM in customer environments.\r\nDesign and implement\r\nLog ingestion pipelines\r\nData normalization and parsing\r\nEntity modeling and asset context\r\nEnsure Cortex XSIAM is fully operational and aligned with Aegis MDR requirements.\r\nPlatform Integration & Enablement\r\nIntegrate Cortex XSIAM with\r\nEndpoint, network, identity, cloud, and SaaS data sources\r\nThird-party security and IT systems\r\nValidate telemetry coverage and data quality across customer environments.\r\nDetection & Automation Foundations\r\nDeploy and tune\r\nCorrelation rules\r\nAnalytics\r\nOut-of-the-box and custom detections\r\nImplement and customize SOAR-based automations and playbooks to support MDR workflows.\r\nOptimize signal quality to reduce noise and improve detection fidelity.\r\nSOC & MDR Enablement\r\nEnsure Cortex XSIAM deployments meet the operational needs of company's SOC.\r\nCollaborate with SOC analysts to\r\nValidate detections\r\nImprove investigation workflows\r\nEnable effective response actions\r\nSupport go-live readiness and transition to steady-state MDR operations.\r\nEngineering & Continuous Improvement\r\nStandardize deployment patterns and implementation best practices.\r\nContribute to internal documentation, runbooks, and reference architectures.\r\nIdentify opportunities to improve scalability, efficiency, and automation across customer deployments.\r\nQualifications & Experience\r\nRequired\r\n2+ years of experience in security operations engineering or similar roles.\r\nHands-on experience deploying and engineering SIEM/XDR platforms.\r\nExperience integrating diverse data sources such as\r\nEDR/XDR\r\nFirewalls and network devices\r\nIdentity providers\r\nCloud platforms\r\nStrong understanding of\r\nSOC architectures\r\nDetection engineering concepts\r\nSecurity telemetry and logging pipelines\r\nStrong written and verbal communication skills.\r\nPreferred\r\nExperience with Cortex XSIAM and/or Cortex XSOAR (Demisto).\r\nExperience with any other SOAR platforms (CrowdStrike Fusion SOAR, IBM QRadar SOAR, SentinelOne Singularity automation, etc.).\r\nScripting or automation skills (Python, PowerShell, Bash).\r\nCloud security and logging experience (AWS, Azure, GCP).\r\nPalo Alto Networks certifications (PCNSE, PCSAE) or equivalent security certifications.\r\nApply online at ArchonResources.com.\r\nJ-18808-Ljbffr","company":"Archon Resources","rawCompany":"archon resources","city":"Tulsa","state":"OK","isRemote":false,"isActive":false,"createdAt":"2026-04-09T07:56:30.419Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Operations Engineer","description":"Position Summary\r\nOur client is seeking a Security Operations Engineer to design, deploy, and operationalize Cortex XSIAM as the foundational platform that powers our Aegis Managed Detection & Response (MDR) practice.\r\nPosition Details\r\nPosition: Security Operations Engineer\r\nType: Direct hire\r\nLocation: Remote\r\nThis is not a traditional SOC analyst or incident responder role. Instead, this position is focused on engineering the security operations platforms that our customers and partners rely on. This includes building the telemetry pipelines, detections, automations, and integrations required for a modern, scalable MDR service or successful customer SOC buildout.\r\nYou will work closely with company engineering, customer stakeholders, and be a part of the SOC. This role's primary responsibility is to ensure Cortex XSIAM is implemented in a way that enables high-fidelity detection, efficient response, and long-term operational success.\r\nExisting experience using Cortex is preferred; however training is provided and is mandatory.\r\nKey Responsibilities\r\nLead end-to-end deployment and implementation of Cortex XSIAM in customer environments.\r\nDesign and implement\r\nLog ingestion pipelines\r\nData normalization and parsing\r\nEntity modeling and asset context\r\nEnsure Cortex XSIAM is fully operational and aligned with Aegis MDR requirements.\r\nPlatform Integration & Enablement\r\nIntegrate Cortex XSIAM with\r\nEndpoint, network, identity, cloud, and SaaS data sources\r\nThird-party security and IT systems\r\nValidate telemetry coverage and data quality across customer environments.\r\nDetection & Automation Foundations\r\nDeploy and tune\r\nCorrelation rules\r\nAnalytics\r\nOut-of-the-box and custom detections\r\nImplement and customize SOAR-based automations and playbooks to support MDR workflows.\r\nOptimize signal quality to reduce noise and improve detection fidelity.\r\nSOC & MDR Enablement\r\nEnsure Cortex XSIAM deployments meet the operational needs of company's SOC.\r\nCollaborate with SOC analysts to\r\nValidate detections\r\nImprove investigation workflows\r\nEnable effective response actions\r\nSupport go-live readiness and transition to steady-state MDR operations.\r\nEngineering & Continuous Improvement\r\nStandardize deployment patterns and implementation best practices.\r\nContribute to internal documentation, runbooks, and reference architectures.\r\nIdentify opportunities to improve scalability, efficiency, and automation across customer deployments.\r\nQualifications & Experience\r\nRequired\r\n2+ years of experience in security operations engineering or similar roles.\r\nHands-on experience deploying and engineering SIEM/XDR platforms.\r\nExperience integrating diverse data sources such as\r\nEDR/XDR\r\nFirewalls and network devices\r\nIdentity providers\r\nCloud platforms\r\nStrong understanding of\r\nSOC architectures\r\nDetection engineering concepts\r\nSecurity telemetry and logging pipelines\r\nStrong written and verbal communication skills.\r\nPreferred\r\nExperience with Cortex XSIAM and/or Cortex XSOAR (Demisto).\r\nExperience with any other SOAR platforms (CrowdStrike Fusion SOAR, IBM QRadar SOAR, SentinelOne Singularity automation, etc.).\r\nScripting or automation skills (Python, PowerShell, Bash).\r\nCloud security and logging experience (AWS, Azure, GCP).\r\nPalo Alto Networks certifications (PCNSE, PCSAE) or equivalent security certifications.\r\nApply online at ArchonResources.com.\r\nJ-18808-Ljbffr","datePosted":"2026-04-09T07:56:30.419Z","dateModified":"2026-04-09T07:56:30.419Z","hiringOrganization":{"@type":"Organization","name":"Archon Resources","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tulsa","addressRegion":"OK","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"014d4fbce5a238942599bf49"},"url":"https://jobsearcher.com/jobs/014d4fbce5a238942599bf49"}}