Remote Manager, XSIAM SOC Engineering

Jobs Paloaltonetworks; California (MO); Hybrid; USD 175,000 - 284,000; Full time

Job summary

Palo Alto Networks is seeking a Manager of Managed XSIAM SOC Engineering to lead a high-performing SOC team, balancing people leadership with hands-on technical work. You will drive detection strategy, develop automation playbooks (Python-based), and collaborate across Cortex Engineering and Unit 42 to improve detection efficacy while meeting KPIs.

This remote role spans geographies, offering a rare chance to influence threat detection at scale while partnering with cross-functional teams to

Qualifications

• 3+ years of direct security engineering or SOC management.
• 5+ years in Detection Engineering, SIEM, SOAR, and EDR/XDR.
• Hands-on coding in Python with DaC and CI/CD for SOC.
• Deep threat and domain expertise with advanced correlation logic.
• Operational mindset with SLA and quality metrics.
• Strong collaboration across executive, client-facing and cross-functional teams.

Responsibilities

• Lead and empower a high-performing SOC and Detection Engineering team.
• Provide hands-on technical leadership and code when needed.
• Drive content packs, integrations, and automation initiatives.
• Own end-to-end detection and playbook development with KPI accountability.
• Collaborate with Unit 42 and Cortex Engineering for production improvements.
• Enforce standards for testing and deployment processes.
• Serve as senior escalation point for high-priority engagements.

Skills

Management Experience

Industry Experience

Python Coding

Detection as Code

Threat & Domain Expertise

Operational Mindset

Stakeholder Communication

Tools

Cortex XSIAM

Cortex XSOAR

CI/CD tooling

Job description

Palo Alto Networks is seeking a Manager of Managed XSIAM SOC Engineering to lead a high-performing SOC team, balancing people leadership with hands-on technical work. You will drive detection strategy, develop automation playbooks (Python-based), and collaborate across Cortex Engineering and Unit 42 to improve detection efficacy while meeting KPIs.

This remote role spans geographies, offering a rare chance to influence threat detection at scale while partnering with cross-functional teams to