Remote Cortex XSIAM Solutions Consultant

Palo Alto Networks, Inc.; California (MO); Remote; USD 175,000 - 241,000; Full time

Benefits offered by this job

Remote work

Job summary

Palo Alto Networks, Inc. is seeking a highly skilled Professional Services Consultant (PSC) – Cortex XSIAM to deliver end-to-end SOC modernization across SIEM and SOAR.

You will guide large customers through log migration, threat detection design, and automation playbooks within Cortex XSIAM, leveraging Python integrations and advanced security workflows. As a trusted SME, you will craft detection logic, tune ingestion, and deploy dashboards while collaborating with security stakeholders to map

Qualifications

• 6+ years deploying enterprise SIEM solutions like Splunk, QRadar, or Sentinel.
• 4+ years with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers.
• Proven experience building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem.
• Proficiency in Python for security tool integration and automation scripting, with strong Regex for log parsing.
• Experience with RESTful APIs, JSON data structures, and third‑party security integrations.
• Exceptional written and verbal presentation skills, with a track record of clear design documentation.
• Strong analytical mindset capable of troubleshooting complex technical workstreams and integration flows.
• Ability to travel occasionally (up to 10%) for on-site customer meetings and workshops.

Responsibilities

• Design and onboard log sources into Cortex XSIAM, optimizing ingestion and parsing.
• Develop and tune detection rules across endpoint, network, and cloud security.
• Monitor log throughput and detection logic for performance.
• Automate SOC processes with Cortex XSIAM playbooks and dashboards.
• Write Python integrations to connect Cortex XSIAM with third-party tools via REST APIs.
• Deploy content packs, layouts, and dashboards tailored to use cases.
• Serve as SME on Cortex XSIAM, SIEM architecture, and SOAR best practices.
• Collaborate with stakeholders to define security metrics and automation roadmaps.
• Produce technical design docs to enable long-term customer autonomy.

Skills

SIEM deployment

SOC tooling

Python scripting

Regex for log parsing

RESTful APIs

Technical documentation

Analytical mindset

Customer workshops

Travel up to 10%

Education

Bachelor's degree in CS/Cybersecurity

Tools

Cortex XSIAM

Cortex XSOAR

Splunk

IBM QRadar

Microsoft Sentinel

Job description

Palo Alto Networks, Inc. is seeking a highly skilled Professional Services Consultant (PSC) – Cortex XSIAM to deliver end-to-end SOC modernization across SIEM and SOAR.

You will guide large customers through log migration, threat detection design, and automation playbooks within Cortex XSIAM, leveraging Python integrations and advanced security workflows. As a trusted SME, you will craft detection logic, tune ingestion, and deploy dashboards while collaborating with security stakeholders to map