Senior Cortex XSIAM Engineer: SOC Automation Lead

Penta Consulting; Riyadh; On-site; SAR 260,000 - 340,000; Full time

Job summary

Penta Consulting is seeking an experienced Senior XSIAM Consultant to lead the deployment and optimization of Cortex XSIAM for major banking clients in Riyadh. You will work with SOC teams, architects, and stakeholders to strengthen threat detection, incident response, and automation.

The role requires hands-on experience with Cortex XSIAM/XDR/XSOAR, SIEM, and cloud telemetry across complex enterprise environments with strong communication and stakeholder management skills.

Qualifications

• 4+ years hands-on experience with Palo Alto Cortex XSIAM.
• Proven track record implementing and supporting SOC platforms.
• Experience integrating endpoint, network, identity and cloud telemetry.
• Knowledge of MITRE ATT&CK framework and security analytics.
• Hands-on scripting and automation (Python, PowerShell, APIs).
• Relevant Palo Alto Networks certifications.

Responsibilities

• Design, deploy, configure, and support Cortex XSIAM solutions in enterprise environments.
• Integrate telemetry from endpoints, networks, cloud, identity and third-party tools.
• Develop detection use cases, rules, playbooks and response workflows.
• Enhance SOC operations with automation and orchestration capabilities.
• Investigate incidents, perform threat analysis and assist incident response.
• Configure integrations with SIEM, SOAR, XDR and monitoring platforms.
• Create dashboards, reports and metrics for stakeholders.
• Collaborate with architects and engineering to apply best practices.

Skills

Palo Alto Cortex XSIAM

SOC platforms

Cortex XDR

Cortex XSOAR

SIEM technologies

Threat detection

Automation scripting

Python

PowerShell

API integrations

MITRE ATT&CK

Cloud security

Tools

Cortex XSIAM

Cortex XDR

Cortex XSOAR

SIEM

SOAR

XDR

Cloud security platforms

Job description

Penta Consulting is seeking an experienced Senior XSIAM Consultant to lead the deployment and optimization of Cortex XSIAM for major banking clients in Riyadh. You will work with SOC teams, architects, and stakeholders to strengthen threat detection, incident response, and automation.

The role requires hands-on experience with Cortex XSIAM/XDR/XSOAR, SIEM, and cloud telemetry across complex enterprise environments with strong communication and stakeholder management skills.