Remote Cortex XSIAM Solutions Architect

Palo Alto Networks; California; Remote; USD 175,000 - 241,000; Full time

Job summary

Palo Alto Networks is seeking a Professional Services Consultant (PSC) – Cortex XSIAM to lead end-to-end SOC modernization for enterprise customers. You will guide log migrations, design detection strategies, and build automation playbooks within Cortex XSIAM.

You will leverage Python, RESTful APIs, and content packs to elevate security posture, with occasional travel up to 10% for on-site workshops and customer engagements.

Qualifications

• 6+ years deploying, integrating, and managing enterprise SIEMs (e.g., Splunk, QRadar, Sentinel).
• 4+ years with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network.
• Experience building playbooks, configuring correlation rules, and managing Cortex content & integrations.
• Proficiency in Python for security tool integration and automation; strong Regex for log parsing.
• Experience with RESTful APIs, JSON, and third‑party security integrations.
• Excellent technical writing and clear documentation skills.
• Strong analytical mindset to troubleshoot complex workstreams.
• Proactive, consultative approach to translating challenges into engineering requirements.
• Willingness to travel up to 10% for on-site workshops.

Responsibilities

• Design and execute onboarding, ingestion, and parsing of log sources into Cortex XSIAM.
• Build and fine-tune correlation and detection rules across SIEM/SOAR environments.
• Monitor and optimize log ingestion performance and detection logic.
• Automate SOC processes with XSIAM playbooks and workflow automation.
• Write Python integrations to connect Cortex XSIAM with third‑party tools and APIs.
• Develop content packs, layouts, and dashboards tailored to customer use cases.
• Serve as SME on Cortex XSIAM, SIEM architecture, and SOAR best practices.
• Collaborate with security stakeholders to define metrics and automation roadmaps.
• Conduct technical workshops and produce design documentation for customer autonomy.

Skills

SIEM deployment

SOC tooling

Incident response

Security analysis

Playbooks

Cortex integrations

Correlation rules

Python scripting

Regex

REST APIs

JSON data structures

Security integrations

Technical writing

Presentation skills

Analytical mindset

Consultative approach

Travel readiness

Cortex XSIAM

Education

Bachelors in Computer Science/Cybersecurity/IT or equivalent

Tools

Cortex XSIAM

Job description

Palo Alto Networks is seeking a Professional Services Consultant (PSC) – Cortex XSIAM to lead end-to-end SOC modernization for enterprise customers. You will guide log migrations, design detection strategies, and build automation playbooks within Cortex XSIAM.

You will leverage Python, RESTful APIs, and content packs to elevate security posture, with occasional travel up to 10% for on-site workshops and customer engagements.