Remote Cortex XSIAM Consultant – SIEM & SOAR Expert

Palo Alto Networks; Heber (UT); Remoto; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Palo Alto Networks is seeking a highly experienced Professional Services Consultant (Cortex XSIAM) to lead end-to-end SOC modernization for enterprise customers. You will guide log migration, design detection strategies, and engineer advanced automation playbooks within Cortex XSIAM.

You will build rules, tune data ingestion, and deliver automated workflows across SIEM and SOAR to elevate incident response capabilities.

Competenze

• 6+ years deploying, integrating, and managing enterprise SIEM solutions.
• ~4+ years of direct experience with SOC tooling, incident response lifecycles, and security analysis.
• Proven experience building playbooks, configuring correlation rules, and managing Cortex content/integrations.
• Proficiency in Python for security tool integration and automation scripting, with Regex for log parsing.
• Experience with RESTful APIs, JSON data structures, and third‑party security integrations.
• Proactive, consultative approach to translating customer challenges into engineering requirements.
• Ability to travel up to 10% for on‑site meetings and workshops.

Mansioni

• Build and fine‑tune correlation and detection rules across endpoint, network, and cloud environments.
• Monitor and tune log source performance and ingestion rates; optimize detection logic.
• Transform manual SOC processes into automated, scalable Cortex XSIAM workflows.
• Write Python integrations to connect Cortex XSIAM with third‑party security tools and RESTful APIs.
• Deploy and manage content packs, layouts, and automated dashboards for customer use cases.
• Serve as SME on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR best practices.
• Collaborate with security stakeholders to define metrics and automation roadmaps.
• Conduct technical workshops and produce design documentation to enable customer autonomy.

Conoscenze

SIEM tooling

Python scripting

RESTful APIs

Regex parsing

Automation playbooks

Content/Integrations

Customer consulting

SOC tooling experience

Formazione

Bachelor's degree in Computer Science / Cybersecurity / IT

Strumenti

Cortex XSIAM

Splunk

IBM QRadar

Microsoft Sentinel

Descrizione del lavoro

Palo Alto Networks is seeking a highly experienced Professional Services Consultant (Cortex XSIAM) to lead end-to-end SOC modernization for enterprise customers. You will guide log migration, design detection strategies, and engineer advanced automation playbooks within Cortex XSIAM.

You will build rules, tune data ingestion, and deliver automated workflows across SIEM and SOAR to elevate incident response capabilities.