Remote Cortex XSIAM SIEM & SOAR Consultant

Palo Alto Networks; North Carolina; Remote; USD 140,000 - 190,000; Full time

Job summary

Palo Alto Networks is seeking a Senior Professional Services Consultant to lead end-to-end Cortex XSIAM SOC modernization for enterprise customers. You will guide log migration, design detection strategies, and engineer automation playbooks to elevate security posture.

You will deploy content packs, build dashboards, and integrate Cortex XSIAM with third‑party tools while collaborating with security stakeholders on metrics and roadmaps.

Qualifications

• 6+ years hands-on deploying, integrating, and managing enterprise SIEMs.
• 4+ years direct experience with SOC tooling, incident response lifecycles, and security analysis across cloud/endpoint/network.
• Proven experience building playbooks, configuring rules, and managing Cortex ecosystem content.
• Proficiency in Python for security tool integration and automation scripting with Regex-based log parsing.
• Experience with RESTful APIs, JSON data structures, and third-party security integrations.
• Proactive, consultative approach translating customer challenges into engineering requirements.
• Ability to travel up to 10% for on-site meetings and workshops.

Responsibilities

• Build and tune correlation and detection rules across endpoint, network, and cloud.
• Monitor log source performance, ingestion rates, and detection logic for efficiency.
• Transform manual SOC processes into automated, scalable workflows with Cortex XSIAM playbooks.
• Write Python integrations to connect Cortex XSIAM with third-party tools and RESTful APIs.
• Deploy and manage content packs, layouts, and dashboards for customer use cases.
• Serve as SME on Cortex XSIAM architecture, correlation logic, and SOAR best practices.
• Partner with stakeholders to define security metrics and automation roadmaps.
• Conduct technical workshops and produce design docs for long-term customer autonomy.

Skills

SIEM deployment

SOC tooling

Python scripting

Regex

RESTful APIs

Cortex XSIAM

Playbooks

Customer workshops

Education

Bachelor’s degree

Tools

Splunk

IBM QRadar

Microsoft Sentinel

Cortex XSIAM

Job description

Palo Alto Networks is seeking a Senior Professional Services Consultant to lead end-to-end Cortex XSIAM SOC modernization for enterprise customers. You will guide log migration, design detection strategies, and engineer automation playbooks to elevate security posture.

You will deploy content packs, build dashboards, and integrate Cortex XSIAM with third‑party tools while collaborating with security stakeholders on metrics and roadmaps.