Junior Security Operations Support Engineer

Junior Security Operations Support Engineer (Prisma Access + XSIAM)

We need a handson junior engineer to keep operations tight: monitor Prisma Access, assist with endpoint/XDR onboarding, and drive the daytoday on XSIAM dashboards, alert triage, documentation, and reporting. You'll learn quickly under the senior engineer and help us maintain momentum as we evolve detections and automation.

Core Responsibilities

Operational Support (Prisma Access)
* Monitor health and performance for Mobile Users and Remote Networks; raise and track issues.
* Execute supervised configuration changes in Panorama/Strata Cloud Manager; maintain object groups and policy documentation.
* Escalate end-user support issues to the Service Desk as needed, ensuring timely resolution and proper documentation.

XSIAM DaytoDay
* Maintain dashboards and reports; assist with alert triage, enrichment checks, annotation, and escalation.
* Help test and stage playbook updates; track run outcomes, exceptions, and rollback notes.
* Run data source onboarding tasks (connectivity checks, mappings, parsers), and document normalization steps.

Endpoint/XDR Support
* Assist with XDR agent deployment, policy/profile updates, and broker VM coordination; log and resolve user issues.
* Verify telemetry ingestion into XSIAM; raise gaps and follow through to closure.

Documentation & Knowledge Transfer
* Keep SOPs/runbooks, network diagrams, and asset inventories current; capture change notes for audits.
* Produce weekly operations summaries (incidents, trends, automation wins, open risks).

Required Qualifications
* 0-2 years in IT/network/security support (or equivalent training/military).
* Solid networking fundamentals (TCP/IP, subnets, routing, DNS).
* Familiarity with Palo Alto tools (Panorama, GlobalProtect) and a strong interest in SOC/XSIAM/automation.
* Exposure to Cisco switching concepts and awareness of SD-WAN technologies (HPE EdgeConnect preferred).
* Clear written communication; disciplined troubleshooting and documentation.

Growth Path & Measures
* Demonstrated improvement in alert triage accuracy and runbook completeness.
* Successful execution of endpoint onboarding and dashboard/report maintenance.
* Progress toward independent changes in Prisma Access under supervision; eventual contribution to playbook updates.