Senior SOC Engineer: Cortex XSIAM Detection & Automation

Palo Alto Networks, Inc.; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Palo Alto Networks, Inc. is seeking a Senior SOC Engineer within Unit 42 to drive the creation, validation, and optimization of custom detections and automated playbooks for a global client base.

You will act as a trusted advisor, collaborating with customers to maximize security posture using Cortex XSIAM and Unit 42 expertise in a senior capacity. You will own end-to-end detection engineering lifecycle, automate playbooks, and translate threat intel into robust security logic.

Qualifications

• 5+ years in a Senior SOC, Detection Engineering, or Security Architecture role using SIEMs, firewalls, EDR, sandboxes, and SOAR.
• Proven mastery of the Detection Engineering lifecycle, including rule testing frameworks and continuous tuning.
• Experience reviewing and QAing detection logic written by others with constructive optimization feedback.
• Proactive engineering mindset with automation playbooks (Cortex XSOAR or similar) based on threat vectors.
• Strong incident response, threat hunting, and translating threat intel into defensive measures.
• Software development experience with Python for security automation.
• Excellent consultative and communication skills guiding enterprise customers through architecture decisions.

Responsibilities

• Own the full lifecycle of custom detections and response automations, deploying high-fidelity Cortex XSIAM rules and playbooks.
• Refine correlation rules to ensure performance, accuracy, and operational relevance.
• Translate Unit 42 threat intel into actionable, robust detection logic.
• Design sophisticated automation playbooks to address emerging security challenges and optimize workflows.
• Architect the end-to-end security lifecycle within Cortex XSIAM, linking data ingestion to detection and automated response.

Skills

Python

Cortex XSOAR

Threat intelligence

Incident response

Security automation

Automation playbooks

Consultative skills

Detection engineering

Tools

Cortex XSIAM

SIEM

SOAR

EDR

Firewalls

Job description

Palo Alto Networks, Inc. is seeking a Senior SOC Engineer within Unit 42 to drive the creation, validation, and optimization of custom detections and automated playbooks for a global client base.

You will act as a trusted advisor, collaborating with customers to maximize security posture using Cortex XSIAM and Unit 42 expertise in a senior capacity. You will own end-to-end detection engineering lifecycle, automate playbooks, and translate threat intel into robust security logic.