Cyber Security Engineer / SOC Analyst (Palo Alto, Splunk & SIEM)

Job Title: Cyber Security Engineer / SOC Analyst (Palo Alto, Splunk & SIEM)

Location: Remote (Up to 25% travel to client sites as needed)

Job Summary

We seeking a highly motivated  Cyber Security Engineer / SOC Analyst with strong hands-on expertise in  Palo Alto firewalls, Splunk, and SIEM platforms . This role is responsible for monitoring, detecting, analyzing, and responding to security threats while ensuring the overall protection and resilience of enterprise systems and networks.

Key Responsibilities

• Monitor, analyze, and respond to security alerts using SIEM tools (preferably Splunk)
• Configure, manage, and troubleshoot  Palo Alto Networks (PAN-OS) firewalls
• Perform log ingestion, analysis, and correlation using Splunk
• Develop and maintain SIEM use cases, correlation rules, dashboards, and alerts
• Investigate security incidents and perform root cause analysis
• Collaborate with cross-functional teams to remediate vulnerabilities and security issues
• Conduct proactive threat hunting and continuous security monitoring
• Maintain accurate documentation for incidents, procedures, and compliance requirements
• Support audits and ensure adherence to organizational security policies and standards

Required Skills & Experience

• 3–8 years of experience in Cyber Security, SOC, or SIEM environments
• Strong hands-on experience with:
  • Palo Alto Networks Firewalls (policy management, NAT, VPNs)
  • Splunk (log ingestion, SPL queries, dashboards)
  • SIEM platforms (e.g., Splunk, QRadar, ArcSight)
• Solid understanding of:
  • Network protocols (TCP/IP, DNS, SSL)
  • Security frameworks (NIST, ISO 27001, MITRE ATT&CK)
• Experience with incident response and threat intelligence
• Familiarity with endpoint security tools and IDS/IPS technologies

Preferred Qualifications

• Relevant certifications such as:
  • PCNSE (Palo Alto Certified Network Security Engineer)
  • Splunk Certified Power User or Administrator
  • CEH, CISSP, or Security+
• Experience with SOAR tools (e.g., Cortex XSOAR, Splunk Phantom)
• Exposure to cloud security (AWS or Azure environments)
• Basic scripting knowledge (Python, PowerShell)

Nice to Have

• Experience with  Palo Alto Networks Prisma SASE solutions
• Understanding of SASE architecture for hybrid workforce environments
• Exposure to Prisma Access, Prisma SD-WAN, and ADEM
• SASE-related certifications or hands-on experience