Senior MSIAM SOC Engineer - Detection & Automation (Remote)

Palo Alto Networks, Inc.; Texas; Vor Ort; USD 126.000 - 205.000; Vollzeit

Zusammenfassung

Palo Alto Networks, Inc. is seeking a senior security expert to drive detection engineering within our Cortex XSIAM framework. You will refine correlation rules, translate threat intel into robust detection logic, and design automation playbooks to stay ahead of evolving adversaries.

You will lead responses across enterprise customers, drawing on Python development, SIEM and SOAR experience, and a proactive engineering mindset to improve operations and protect digital ecosystems.

Qualifikationen

• 5+ years in Senior SOC, Detection Engineering, or Security Architecture using SIEMs, firewalls, EDR, sandboxes and SOAR.
• Experience with the Detection Engineering lifecycle: rule testing, soft-deployments, tuning.
• Experience reviewing detection logic and providing optimization feedback.
• Proactive engineering mindset with automation playbooks (Cortex XSOAR or similar).
• Strong incident response, threat hunting, and translating threat intel into defenses.
• Software development experience, Python proficiency for security automation.
• Excellent consultative and communication skills guiding enterprise customers.

Aufgaben

• Drive refinement of correlation rules ensuring performance, accuracy, and relevance.
• Translate threat intel into actionable, robust detection logic.
• Champion automation and playbooks to resolve security challenges and optimize workflows.
• Architect end-to-end security lifecycle within Cortex XSIAM from data ingestion to response automation.

Kenntnisse

Senior SOC

Detection Engineering

Security Architecture

Python for security automation

Incident Response

Threat Hunting

Automation Playbooks

Tools

Cortex XSOAR

Cortex XSIAM

SIEMs

Jobbeschreibung

Palo Alto Networks, Inc. is seeking a senior security expert to drive detection engineering within our Cortex XSIAM framework. You will refine correlation rules, translate threat intel into robust detection logic, and design automation playbooks to stay ahead of evolving adversaries.

You will lead responses across enterprise customers, drawing on Python development, SIEM and SOAR experience, and a proactive engineering mindset to improve operations and protect digital ecosystems.