Cortex XDR Engineer

Cortex XDR Resident Engineer

Entelligence is seeking a Cortex XDR Resident Engineer to support our Customer. The successful candidate must be able to work in a cross-functional environment and interact with representatives from Entelligence, the Customer, and the end-user. This position is hybrid in Tallahassee, FL 2x a week.

The Cortex XDR Resident Engineer will function as the Cortex XDR Subject Matter Expert (SME) and will interact directly with the customer's personnel. The Engineer will serve as the technical expert on executive-level project teams within the customer providing technical direction, interpretation, and alternatives. The Engineer contributes to the development of new principles and concepts, works on unusually complex technical problems, and provides solutions which are highly innovative and ingenious.

RESPONSIBILITIES:

• Work with customers in delivering Cortex XDR's detection and response app that natively integrates network, endpoint, and cloud data to assist customers to stop sophisticated attacks

• Portfolio of applications in support include Advanced Endpoint Protection (XDR), Cortex XDR - Investigations and Response, Cortex XDR - Analytics, Autofocus, Cortex Data Lake and XSOAR (Security Orchestration, Automation & Response)

• Prepare capacity planning, deployment, business continuity and configuration guides

• Ability to communicate effectively in various situations with all levels of an organization from Engineering/Operations to CIO/CISO audiences

• Present highly technical information to non-technical personnel

• Develop key performance indicators (KPIs), understand critical success factors, and continuously measure performance

• Analyze customer requirements, provide guidance & assistance throughout the customer lifecycle to ensure a quick and successful product deployment

• Product Expert - Act as the product SME, working together with product and engineering teams ensuring our customers and partners get the most out of our products

• Drive Product Adoption - Continuous contact with customers to expand adoption of our product by utilizing new features and developing additional innovative use cases

JOB REQUIREMENTS:

• Endpoint protection deployment, operationalization, troubleshooting, training experience

• Experience as a Security Incident Responder or SOC analyst/manager

• Familiarity with cloud technologies, providers (GCP, AWS, Azure), use-cases

• Networking experience in TCP/IP, OSI Model, troubleshooting, analysis

• Experience in customer-facing roles

• Familiarity with machine learning and its various applications within cybersecurity

• Familiarity with the different enterprise security and IT products, processes, and ecosystem

• Threat hunting and detection engineering experience of tuning alerts, development of custom BIOCs, and development of correlation rules for new log sources

• Experience with log ingestion and parsing rules for XDR

• The ability to develop and maintain scripts in Python or Powershell is a plus

• Familiarity with XQL, SQL, or a query scripting language

• Experience with SIEM tools, such as Splunk

• Familiarity with XDR APIs

• Basic Linux system administration & troubleshooting experience

• Ability to work under pressure and prioritize tasks accordingly

BENEFITS

• Competitive base salary

• Medical, dental, vision and life insurance

• Vacation, sick time and paid holidays

• Matching 401(k) program

ENTELLIGENCE. ALWAYS READY.

Since 1997, Entelligence has provided mission critical project delivery capacity for uninterrupted growth and long-term market leadership to the industry's biggest enterprise IT brands. Our commitment to close working partnerships and a proven approach for sustainable success is why Entelligence is Always Ready to help the world's technology leaders quickly deliver their most advanced IT solutions to their most important customers.
//HEREFISH
window.hfDomain = “https://api.herefish.com”;
window.hfAccountId = "461cee80-4d87-4951-9972-95772bebe59f";
(function() {
var hf = document.createElement("script"); hf.type = "text/javascript"; hf.async = true;
hf.src = window.hfDomain + "scripts/hf.js";
var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hf, s);
})();