EDR Specialist (Cortex XDR/EDR)

Overview

EDR Specialist (Cortex XDR/EDR) Jobs in Doha at Al Adyat consultancy

Owns end-to-end delivery of the Palo Alto Networks Cortex XDR/EDR platform across a complex, multi-tenant environment, covering architecture, design, tenant onboarding, agent deployment, policy configuration, detection tuning, and structured handover into operations.

Key Responsibilities

· Lead solution architecture and detailed design (HLD / LLD) for Cortex XDR/EDR in a multi-tenant deployment model

· Design and build multi-tenant architecture, including tenant segregation, role-based access control, and per-tenant policy profiles

· Deploy, configure, and manage Cortex XDR agents across endpoint, server, and cloud workloads

· Onboard new tenants and business units, including agent rollout, exclusions, and endpoint profile baselining

· Develop, tune, and optimize prevention, detection, and response policies (malware, exploit, and behavioral threat protection)

· Implement analytics, BIOC/IOC rules, and detection use cases aligned to MITRE ATT&CK

· Configure and manage Cortex XDR integrations with SIEM, SOAR, threat intelligence, and identity/directory sources

· Validate agent health, policy compliance, and endpoint coverage across all tenants

· Support incident response workflows, including endpoint isolation, forensic data collection, and remediation actions via Cortex XDR

· Produce operational documentation and conduct knowledge transfer to run teams

· Support stabilization and transition into BAU operations across all onboarded tenants

Skills and Experience

· Strong hands-on experience with Palo Alto Networks Cortex XDR/EDR (agent deployment, console administration, policy configuration)

· Proven experience designing and operating complex, multi-tenant EDR environments across multiple business units or customers

· Strong understanding of endpoint protection, detection engineering, and incident response

· Experience with Cortex XDR analytics, BIOC/IOC rule creation, and MITRE ATT&CK-aligned use cases

· Experience integrating EDR with SIEM, SOAR, and enterprise security tooling

· Experience producing technical design and operational handover documentation

· Palo Alto Networks certification (e.g., Cortex XDR/XSIAM Certified) preferred

Key Deliverables

· Multi-tenant Cortex XDR/EDR solution architecture and design documentation

· Configured and optimized Cortex XDR platform across all tenants

· Implemented and tuned prevention, detection, and response policies and use cases

· Runbooks, SOPs, and formal handover to operations

Pay: From QAR15,000.00 per month

Education:

• Bachelor’s (Required)

Experience:

• Palo Alto Networks Cortex XDR/EDR : 3 years (Required)

Language:

• Arabic (Preferred)
• English (Preferred)

License/Certification:

• Information Technology (Required)

Work Location: In person

Title: EDR Specialist (Cortex XDR/EDR)

Company: Al Adyat consultancy

Location: Doha