Senior SIEM & XSIAM Detection Engineer

Palo Alto Networks; North Carolina; Remote; USD 135,000 - 218,000; Full time

Job summary

Palo Alto Networks is seeking a Senior SOC/Detection Engineer to refine detection rules and translate threat intel into robust logic. This role emphasizes automation, playbook development, and shaping the Cortex XSIAM lifecycle. You will collaborate across geographies to protect customers in a remote-friendly, high-impact environment.

The position demands strong Python skills, incident response expertise, and experience with SIEMs, EDR, SOAR, and Cortex platforms. Remote work is supported.

Qualifications

• 5+ years of hands-on experience in a Senior SOC, Detection Engineering, or Security Architecture role.
• Experience with rule testing frameworks, soft-deployment strategies, and continuous tuning.
• Experience reviewing and QA-ing detection logic written by others, with feedback skills.
• Proactive automation with playbooks (Cortex XSOAR or similar) based on anticipated threat vectors.
• Strong incident response, threat hunting, and translating threat intelligence into actionable defense mechanisms.
• Software development experience, with a strong proficiency in Python for security automation.
• Exceptional consultative and communication skills capable of guiding enterprise customers through complex decisions.

Responsibilities

• Drive the continuous refinement of correlation rules, ensuring deployed detection logic meets performance, accuracy, and operational relevance.
• Translate Unit 42 threat intelligence and emerging adversary TTPs into actionable, robust detection logic.
• Champion proactive automation, engineering sophisticated playbooks to resolve emerging security challenges and optimize workflows.
• Architect the end-to-end security lifecycle within Cortex XSIAM, connecting data ingestion, high‑fidelity detection engineering, and sophisticated response automation.

Skills

SIEMs

Firewalls

EDR

Sandboxes

SOAR platforms

Python

Incident response

Threat hunting

Consultative skills

Tools

Cortex XSOAR

Cortex XSIAM

Job description

Palo Alto Networks is seeking a Senior SOC/Detection Engineer to refine detection rules and translate threat intel into robust logic. This role emphasizes automation, playbook development, and shaping the Cortex XSIAM lifecycle. You will collaborate across geographies to protect customers in a remote-friendly, high-impact environment.

The position demands strong Python skills, incident response expertise, and experience with SIEMs, EDR, SOAR, and Cortex platforms. Remote work is supported.