Remote Senior Cortex XSIAM Architect — SIEM & SOAR

Palo Alto Networks; Clayton (NC); Remote; USD 140,000 - 200,000; Full time

Job summary

Palo Alto Networks is seeking a Senior Professional Services Consultant (Cortex XSIAM) to lead end-to-end SOC modernization for enterprise customers. You will design detection strategies, build playbooks, and automate security workflows using Python and Cortex XSIAM.

This remote role travels up to 10% for on-site workshops and alignment with customer teams, delivering technical design docs and hands-on guidance to elevate security postures.

Qualifications

• 6+ years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions.
• ~4+ years of direct experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network.
• ~ Proven experience building playbooks and managing Cortex content and integrations.
• ~ Proficiency in Python for security tool integration and automation, with strong Regex for log parsing.
• ~ Experience with RESTful APIs, JSON data structures, and third-party integrations.
• ~ Proactive, consultative approach to understanding customer challenges and translating them into requirements.
• ~ Ability to travel occasionally (up to 10%).

Responsibilities

• Build and fine-tune correlation and detection rules to identify threats across endpoint, network, and cloud environments.
• Monitor log source performance, ingestion rates, and detection logic to enhance system efficiency.
• Analyze manual SOC processes and transform them into automated, scalable workflows using XSIAM automation playbooks.
• Write custom Python integrations to connect Cortex XSIAM with third‑party security tools and RESTful APIs.
• Deploy and manage content packs, custom layouts, and automated dashboards tailored to customer security use cases.
• Serve as a trusted SME on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR automation best practices.
• Partner with security stakeholders to define security metrics and strategic automation roadmaps.
• Conduct technical workshops and produce technical design documentation to enable long‑term customer autonomy.

Skills

SIEM experience

Python scripting

RESTful APIs

Regex

Consultative approach

Travel readiness

Education

Bachelor's degree in CS/IT or related field

Tools

Splunk

QRadar

Microsoft Sentinel

Cortex XSIAM

Job description

Palo Alto Networks is seeking a Senior Professional Services Consultant (Cortex XSIAM) to lead end-to-end SOC modernization for enterprise customers. You will design detection strategies, build playbooks, and automate security workflows using Python and Cortex XSIAM.

This remote role travels up to 10% for on-site workshops and alignment with customer teams, delivering technical design docs and hands-on guidance to elevate security postures.