XDR Specailist

Key Responsibilities

• Administer and maintain the Palo Alto Cortex XDR platform.
• Monitor security alerts and investigate suspicious activity across endpoints and servers.
• Conduct threat hunting activities using Cortex XDR analytics and telemetry.
• Lead incident response activities, including containment, eradication, and recovery.
• Develop and tune detection rules, alerts, and XQL queries to improve threat visibility.
• Integrate Cortex XDR with SIEM, SOAR, and other security technologies.
• Perform endpoint security assessments and recommend remediation actions.
• Produce technical reports, dashboards, and security metrics for stakeholders.
• Support vulnerability management and endpoint hardening initiatives.
• Provide operational support and guidance to security and IT teams.