Cortex XSIAM Implementation Consultant

Palo Alto Networks; Canberra; On-site; AUD 180,000 - 240,000; Full time

Job summary

Palo Alto Networks is seeking a senior security delivery professional to modernize and automate customer security operations in the ANZ region. You will deploy our Cortex platform, move clients from legacy tools to an autonomous detection and response framework, and empower client teams through structured knowledge transfer.

You will leverage expertise in SOC processes, incident response, and SIEM/EDR consolidation to drive outcomes in complex MSSP and consulting contexts.

Qualifications

• Talent levels will be aligned to demonstrated experience and architectural leadership.
• Strong understanding of modern SOC processes and incident response workflows.
• Experience consolidating SIEM, SOAR and EDR/XDR solutions.
• Ability to craft custom correlation rules and identify IOCs/BIOCs.
• Hands-on data engineering, log ingestion, and building custom parsers.
• Proficient in automation scripting and building API integrations (Python).
• Consultative mindset with ability to lead design discussions with engineers and senior stakeholders.
• Experience in MSSP, systems integrator, or consulting environments.
• Ability to manage multiple projects and work under pressure.

Responsibilities

• Deliver Cortex platform deployments for ANZ clients.
• Modernize SOC with AI-driven Cortex and transition from legacy SIEM.
• Deploy Cortex XSIAM tenants and configure Broker VMs.
• Lead workshops mapping use cases to correlation rules.
• Integrate log sources and ensure proper data ingestion.
• Create automated playbooks to reduce MTTR.
• Tune alerts and endpoint profiles to minimize noise.
• Partner with project managers to align delivery with scope.
• Provide thorough as-built documentation and knowledge transfer.

Skills

SOC processes

Incident response

SIEM/SOAR/EDR consolidation

Correlation rules

IOCs & BIOCs

Data engineering

Log ingestion

Parsers

API integrations (Python)

Stakeholder communication

MSSP/consulting

Multi-project delivery

Regulatory awareness (ANZ)

NV1/clearance advantage

Tools

Python

Job description

Palo Alto Networks is seeking a senior security delivery professional to modernize and automate customer security operations in the ANZ region. You will deploy our Cortex platform, move clients from legacy tools to an autonomous detection and response framework, and empower client teams through structured knowledge transfer.

You will leverage expertise in SOC processes, incident response, and SIEM/EDR consolidation to drive outcomes in complex MSSP and consulting contexts.