Remote Cortex XSIAM Security Consultant | SIEM & SOAR

Palo Alto Networks; Utah; Remote; USD 175,000 - 241,000; Full time

Job summary

Palo Alto Networks is seeking a remote Professional Services Consultant (PSC) for Cortex XSIAM to lead end-to-end SOC modernization across SIEM and SOAR. You will guide customers through log migration, detect threats, and engineer security automation playbooks within Cortex XSIAM.

You will design detection strategies, integrate with third-party tools via Python, and create scalable automation workflows. Remote role with travel up to 10% may be required.

Qualifications

• 6+ years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions like Splunk, IBM QRadar, or Microsoft Sentinel.
• 4+ years of direct experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers.
• Proven experience building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem.
• Proficiency in Python for security tool integration and automation scripting, combined with strong Regex capabilities for log parsing.
• Experience working with RESTful APIs, JSON data structures, and third-party security integrations.
• Exceptional written and verbal presentation skills, with a track record of authoring clear technical design documentation.
• Strong analytical mindset capable of troubleshooting complex technical workstreams and integration flows independently.
• Proactive, consultative approach to understanding customer challenges and translating them into actionable engineering requirements.
• Ability to travel occasionally (up to 10%) for on-site customer meetings, strategic workshops, and technical kickoffs.

Responsibilities

• Design and execute onboarding, ingesting, and parsing log sources into Cortex XSIAM.
• Build and fine-tune correlation and detection rules across endpoint, network, and cloud environments.
• Monitor and tune log source performance, ingestion rates, and detection logic.
• Automate SOC processes with XSIAM playbooks and scalable workflows.
• Write Python integrations to connect Cortex XSIAM with third-party security tools via RESTful APIs.
• Deploy and manage content packs, layouts, and dashboards tailored to customer use cases.
• Serve as an SME on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR best practices.
• Define security metrics and automation roadmaps with stakeholders.
• Produce technical design documentation to enable long-term customer autonomy.

Skills

SIEM deployment

SOC tooling

Playbooks automation

Python scripting

REST APIs

Technical communication

Analytical mindset

Willing to travel

Education

Bachelor's degree

Tools

Cortex XSIAM

Cortex XSOAR

Splunk

QRadar

Microsoft Sentinel

Job description

Palo Alto Networks is seeking a remote Professional Services Consultant (PSC) for Cortex XSIAM to lead end-to-end SOC modernization across SIEM and SOAR. You will guide customers through log migration, detect threats, and engineer security automation playbooks within Cortex XSIAM.

You will design detection strategies, integrate with third-party tools via Python, and create scalable automation workflows. Remote role with travel up to 10% may be required.