Cortex XSIAM Security Operations Consultant

Trantor; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Trantor Inc. seeks a seasoned Professional Services Consultant to lead enterprise Cortex XSIAM and XSOAR deployments for global customers.

You will design, deploy, integrate, automate, and operationalize SIEM/SOAR solutions, collaborating with security teams, architects, and project managers to modernize security operations. The role requires strong consulting, troubleshooting, and customer engagement skills, with hands-on expertise in Cortex XSOAR, XSIAM, and XQL.

Qualifications

• 5–10 years of hands-on experience implementing enterprise SIEM and SOAR platforms.
• Hands-on experience with Cortex XSOAR including playbooks, automations, integrations, Content Packs, and custom scripting.
• Strong expertise in XQL for querying, detection engineering, analytics, and threat hunting.
• Expert-level Regular Expression (Regex) skills with experience developing complex parsers and normalization logic.
• Strong understanding of enterprise log ingestion, parsing, normalization, correlation, and SIEM data models.
• Experience onboarding endpoint, network, identity, cloud, and SaaS log sources.
• Strong Linux/Unix administration skills, including SSH, Bash scripting, grep, awk, sed, journalctl, systemctl, cron, and system log analysis.
• Strong networking fundamentals, including TCP/IP, DNS, Syslog, firewalls, proxies, VPNs, SSL/TLS, routing, and packet capture analysis.
• Strong Python scripting skills for automation and integration development.
• Experience developing REST API integrations using OAuth, JSON, XML, and webhooks.
• Proven troubleshooting experience across SIEM and SOAR deployments, including log ingestion failures, parser issues, API authentication problems, automation failures, integration issues, and platform performance optimization.
• Experience with detection engineering, threat hunting, SOC operations, and incident response.
• Strong understanding of MITRE ATT&CK, NIST Cybersecurity Framework, CIS Controls, and Zero Trust principles.
• Ability to read and create technical architecture and design documentation.
• Excellent communication, presentation, and customer-facing consulting skills.

Responsibilities

• Serve as a trusted technical advisor throughout customer engagements.
• Conduct discovery, design, implementation and knowledge transfer workshops, technical assessments, and architecture sessions to define roadmaps.
• Assess existing SOC processes and recommend improvements to detection, automation, and incident response workflows.
• Provide strategic guidance on Security Operations transformation, platform adoption, and operational best practices.
• Present technical solutions, implementation progress, and recommendations to engineering teams, project stakeholders, and executive leadership.

Skills

Cortex XSOAR

SIEM/SOAR

Python scripting

Regex

Linux/Unix

REST APIs

XQL

Threat hunting

MITRE ATT&CK

Automation

Tools

Content Packs

Webhooks

OAuth

JSON/XML

Job description

Trantor Inc. seeks a seasoned Professional Services Consultant to lead enterprise Cortex XSIAM and XSOAR deployments for global customers.

You will design, deploy, integrate, automate, and operationalize SIEM/SOAR solutions, collaborating with security teams, architects, and project managers to modernize security operations. The role requires strong consulting, troubleshooting, and customer engagement skills, with hands-on expertise in Cortex XSOAR, XSIAM, and XQL.