Senior Remote Cortex XSIAM Security Consultant

Jobs Paloaltonetworks; United Kingdom; Remote; GBP 133,000 - 182,000; Full time

Job summary

Palo Alto Networks is seeking a Remote Professional Services Consultant (PSC) – Cortex XSIAM to drive end-to-end SOC modernization across SIEM and SOAR. You will guide enterprise customers through log migration, design robust detection strategies, and engineer security automation playbooks within Cortex XSIAM.

Expertise in SIEM ingestion, detection engineering, and Python automation is essential. You will build rules, integrations, and dashboards while collaborating with security stakeholders to

Qualifications

• 6+ years deploying enterprise SIEMs (e.g., Splunk, QRadar, Sentinel).
• 4+ years in SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network.
• Experience building playbooks and configurations within the Cortex ecosystem.
• Proficiency in Python for security tool integration and automation scripting; strong Regex for log parsing.
• Experience with RESTful APIs, JSON data structures, and third-party security integrations.
• Exceptional written and verbal presentation skills; ability to author clear technical design docs.
• Strong analytical mindset; able to troubleshoot complex technical workstreams independently.
• Willingness to travel up to 10% for on-site customer engagements.

Responsibilities

• Onboard, ingest, and parse logs into Cortex XSIAM.
• Develop and refine correlation rules across endpoints, networks, and cloud.
• Tune log ingestion performance and detection logic for efficiency.
• Transform manual SOC processes into automated, scalable XSIAM workflows.
• Write Python integrations to connect Cortex XSIAM with third-party tools and RESTful APIs.
• Deploy and manage content packs, layouts, and automated dashboards for customers.
• Serve as SME on Cortex XSIAM, SIEM log architecture, and SOAR best practices.
• Collaborate with stakeholders to set security metrics and automation roadmaps.
• Conduct technical workshops and produce design documentation for customer autonomy.

Skills

SIEM deployment

SOC tooling

Cortex XSIAM

Python automation

Regex parsing

RESTful APIs

Technical writing

Analytical mindset

Travel readiness

Education

Bachelor’s degree in Computer Science

Palo Alto credentials (PCNSE/PCDRA/XSOAR/XSIAM)

CISSP/GIAC certifications

Tools

Python

RESTful APIs

JSON

Job description

Palo Alto Networks is seeking a Remote Professional Services Consultant (PSC) – Cortex XSIAM to drive end-to-end SOC modernization across SIEM and SOAR. You will guide enterprise customers through log migration, design robust detection strategies, and engineer security automation playbooks within Cortex XSIAM.

Expertise in SIEM ingestion, detection engineering, and Python automation is essential. You will build rules, integrations, and dashboards while collaborating with security stakeholders to