Cortex XSIAM Solutions Consultant (ANZ)

Palo Alto Networks, Inc.; North Sydney Council; On-site; AUD 180,000 - 240,000; Full time

Job summary

Palo Alto Networks is seeking a senior-level specialist to modernize and automate security operations across ANZ using the Cortex platform. You will deploy, configure, and operationalize AI-driven threat detection and response, guiding customers through SOC modernization and data integration.

Extensive SOC/IR experience and ANZ market knowledge are essential. Offshore collaboration and on-site engagement across ANZ will be common, with onboarding through our Professional Services Academy to

Qualifications

• We are evaluating talent across multiple seniority levels; your scope of responsibility, autonomy, and architectural leadership will be aligned to your demonstrated experience and expertise.
• Deep understanding of modern SOC processes, Incident Response workflows, and the consolidation of SIEM, SOAR, and EDR/XDR solutions.
• Experience crafting custom correlation rules, and identifying Indicators of Compromise (IOCs) and Behavioral Indicators of Compromise (BIOCs).
• Hands-on experience with data engineering, log ingestion, building custom parsers, and mapping complex data sources to normalized models.
• Proficiency in automation scripting and building custom API integrations (e.g., Python) to streamline incident triage and remediation.
• A consultative approach—you are comfortable leading deep-dive design discussions and communicating effectively with both engineers and senior stakeholders.
• Previous experience in an MSSP, systems integrator, and consulting environment is highly transferable and welcomed.
• Effectively handle multiple projects and work calmly under pressure in dynamic customer environments.
• Familiarity with ANZ regulatory environments, data sovereignty requirements, and local market dynamics is a plus.
• Australian Citizenship with an active NV1 Security Clearance is a significant advantage for immediate deployment on secure government engagements.

Responsibilities

• Drive the deployment, configuration, and operationalization of the Cortex platform for clients across the ANZ region.
• Guide customers through SOC modernization, process re-engineering, and the transition from legacy SIEM environments to an AI-driven platform.
• Remotely deploy new Cortex XSIAM tenants, configure on-premises Broker VMs, and set up advanced automation engines.
• Run collaborative workshops to identify, evaluate, and map customer use cases into actionable correlation rules and analytics.
• Validate and integrate both supported and custom log sources into the platform, ensuring proper data ingestion and parsing.
• Build and re-engineer automated playbooks to replace manual tier-1 analyst tasks, drastically reducing mean time to respond (MTTR).
• Optimize alert logic, tune endpoint profiles (malware, exploits), and create exceptions to ensure a low noise-to-signal ratio without compromising the security posture.
• Collaborate closely with project managers, taking day-to-day direction and ensuring technical delivery aligns with project schedules and scope.
• Deliver comprehensive "as-built" documentation and conduct structured knowledge transfer sessions to ensure the customer’s team is fully prepared to operate the platform.

Skills

SOC processes

Incident Response

IOCs

BIOCs

Data engineering

Automation scripting

Python

Consultative approach

MSSP experience

Multi-project management

ANZ regulatory

NV1 clearance

Job description

Palo Alto Networks is seeking a senior-level specialist to modernize and automate security operations across ANZ using the Cortex platform. You will deploy, configure, and operationalize AI-driven threat detection and response, guiding customers through SOC modernization and data integration.

Extensive SOC/IR experience and ANZ market knowledge are essential. Offshore collaboration and on-site engagement across ANZ will be common, with onboarding through our Professional Services Academy to