Senior SIEM & Detection Engineer for Cortex XSIAM

Palo Alto Networks; United States; Remote; USD 126,000 - 205,000; Full time

Job summary

Palo Alto Networks is seeking a Senior Detection Engineer to advance our threat-detection capabilities in the United States. You will refine correlation rules, translate Unit 42 threat intel into robust detection logic, and build automation playbooks to preempt emerging security challenges while optimizing operations.

You will architect the end-to-end security lifecycle within Cortex XSIAM, linking data ingestion, high-fidelity detection engineering, and proactive response automation,

Qualifications

• 5+ years of hands-on experience in a Senior SOC, Detection Engineering, or Security Architecture role using SIEMs, firewalls, EDR, sandboxes, and SOAR.
• Mastery of the Detection Engineering lifecycle, including rule testing, soft-deployment strategies, and continuous tuning.
• Experience reviewing and QA-ing detection logic written by others with ability to provide optimization feedback.
• Proactive engineering mindset with automation playbooks (Cortex XSOAR or similar) based on anticipated threat vectors.
• Strong background in incident response, threat hunting, and translating threat intelligence into defense mechanisms.
• Software development experience, with Python for security automation.
• Exceptional consultative and communication skills guiding enterprise customers through complex architectural decisions.

Responsibilities

• Drive the continuous refinement of correlation rules, ensuring all deployed detection logic meets standards for performance, accuracy, and relevance.
• Translate Unit 42 threat intelligence research and evolving adversary TTPs into robust detection logic.
• Champion proactive automation, engineering sophisticated playbooks to resolve security challenges and optimize workflows ahead of demand.
• Architect the end-to-end security lifecycle within Cortex XSIAM, connecting data ingestion, high-fidelity detection engineering, and sophisticated response automation.

Skills

Senior SOC

Detection Engineering

Incident response

Threat hunting

Automation playbooks

XSOAR

Tools

Cortex XSOAR

Cortex XSIAM

Python

SIEMs

Job description

Palo Alto Networks is seeking a Senior Detection Engineer to advance our threat-detection capabilities in the United States. You will refine correlation rules, translate Unit 42 threat intel into robust detection logic, and build automation playbooks to preempt emerging security challenges while optimizing operations.

You will architect the end-to-end security lifecycle within Cortex XSIAM, linking data ingestion, high-fidelity detection engineering, and proactive response automation,