XSIAM Resident Engineer

Penta Consulting; Riyadh; On-site; SAR 260,000 - 340,000; Full time

Job summary

Penta Consulting is seeking an experienced Senior XSIAM Consultant to lead the deployment and optimization of Cortex XSIAM for major banking clients in Riyadh. You will work with SOC teams, architects, and stakeholders to strengthen threat detection, incident response, and automation.

The role requires hands-on experience with Cortex XSIAM/XDR/XSOAR, SIEM, and cloud telemetry across complex enterprise environments with strong communication and stakeholder management skills.

Qualifications

• 4+ years hands-on experience with Palo Alto Cortex XSIAM.
• Proven track record implementing and supporting SOC platforms.
• Experience integrating endpoint, network, identity and cloud telemetry.
• Knowledge of MITRE ATT&CK framework and security analytics.
• Hands-on scripting and automation (Python, PowerShell, APIs).
• Relevant Palo Alto Networks certifications.

Responsibilities

• Design, deploy, configure, and support Cortex XSIAM solutions in enterprise environments.
• Integrate telemetry from endpoints, networks, cloud, identity and third-party tools.
• Develop detection use cases, rules, playbooks and response workflows.
• Enhance SOC operations with automation and orchestration capabilities.
• Investigate incidents, perform threat analysis and assist incident response.
• Configure integrations with SIEM, SOAR, XDR and monitoring platforms.
• Create dashboards, reports and metrics for stakeholders.
• Collaborate with architects and engineering to apply best practices.

Skills

Palo Alto Cortex XSIAM

SOC platforms

Cortex XDR

Cortex XSOAR

SIEM technologies

Threat detection

Automation scripting

Python

PowerShell

API integrations

MITRE ATT&CK

Cloud security

Tools

Cortex XSIAM

Cortex XDR

Cortex XSOAR

SIEM

SOAR

XDR

Cloud security platforms

Job description

We are seeking experienced Senior XSIAM Consultants / Engineers to join a high profile cybersecurity transformation programme for leading banking clients. This is an urgent requirement supporting the deployment and optimisation of Palo Alto Cortex XSIAM, one of the most advanced SOC-centric security platforms available today.

The successful candidate will be responsible for implementing, configuring, integrating, and optimising XSIAM solutions within complex enterprise environments. You will work closely with security operations teams, architects, and stakeholders to enhance threat detection, incident response, automation, and overall, SOC efficiency.

Key Responsibilities

• Design, deploy, configure, and support Palo Alto Cortex XSIAM solutions.
• Integrate security telemetry from endpoints, networks, cloud platforms, identity systems, and third-party security tools.
• Develop and optimise detection use cases, correlation rules, automation playbooks, and response workflows.
• Enhance SOC operations through security automation and orchestration capabilities.
• Investigate security incidents, perform threat analysis, and support incident response activities.
• Configure and maintain integrations with SIEM, SOAR, XDR, cloud, and security monitoring platforms.
• Create dashboards, reports, and operational metrics for security stakeholders.
• Collaborate with security architects and engineering teams to implement best practices.
• Support security monitoring, threat hunting, and continuous improvement initiatives.
• Produce technical documentation, knowledge transfer materials, and operational procedures.
• Participate in security workshops, client engagements, and solution design discussions.

Required Skills & Experience

• 4+ years of hands-on experience working with Palo Alto Cortex XSIAM.
• Strong experience implementing and supporting Security Operations Centre (SOC) platforms.
• Experience with: o Cortex XSIAM o Cortex XDR o Cortex XSOAR o SIEM technologies o Security analytics and threat detection
• Strong understanding of: o Security Operations (SOC) o Incident Response o Threat Hunting o Security Monitoring o Cyber Threat Intelligence
• Experience integrating endpoint, network, identity, and cloud telemetry sources.
• Knowledge of security frameworks and best practices.
• Experience creating automation workflows and orchestration playbooks.
• Strong troubleshooting and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Banking or Financial Services experience.
• Experience working within highly regulated environments.
• Experience with cloud security platforms (AWS, Azure, GCP).
• Knowledge of MITRE ATT&CK framework.
• Experience with scripting and automation (Python, PowerShell, API integrations).
• Relevant Palo Alto Networks certifications.

Technical Environment

The ideal candidate will have experience across:

• Cortex XDR
• Cortex XSOAR
• SIEM Technologies
• SOAR Platforms
• XDR Platforms
• Security Analytics
• Network Security
• Identity Security
• Cloud Security Monitoring
• Security Automation & Orchestration

Preferred Candidate

Profile You are a hands-on cybersecurity professional with experience across modern SOC environments and security operations technologies. You have worked with one or more Palo Alto security solutions, such as XSIAM, XSOAR, XDR, SIEM, or SOAR platforms, and are comfortable operating within fast-paced enterprise environments where security monitoring, threat detection, incident response, and automation are critical to business success.

Please note: Banking industry experience is highly desirable but not mandatory. Candidates with strong hands-on Cortex XSIAM experience will be prioritised.