Senior XSIAM Consultant/Engineer (EMEA)

Saddleback Solutions; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Free training for consultants

Workshops/bootcamps opportunities

Job summary

Saddleback Solutions seeks an experienced XSIAM Architect to lead complex deployments and optimize security operations for diverse clients. You will drive kickoff planning, perform architectural discovery, and guide hands-on configuration of Cortex XSIAM across multi-tenant environments.

Responsibilities include data onboarding, endpoint tuning, rule development, and Threat Intel integration to enhance detection and reduce noise.

Qualifications

• Bachelor's degree in CS, InfoSec, or related field required; Master's preferred.
• Minimum 8 years in cybersecurity focusing on SOC, incident response, and threat detection.
• Proven experience leading XSIAM deployments and SOC transformations.

Responsibilities

• Lead Kickoff and Planning Phase for XSIAM deployments, defining scope, objectives, timelines, and resources.
• Conduct Architectural Discovery sessions to understand client environments, security requirements, and integration points for XSIAM.
• Oversee and participate in Cortex XSIAM deployments, including multi-tenant setups.
• Provide hands-on support for Data Source Onboarding and ingestion of security telemetry.
• Specialize in Endpoints Tuning within XSIAM to reduce noise and improve detection.
• Develop and implement advanced Correlation Rules to identify threats and streamline alerts.
• Configure Attack Surface Management (ASM) within XSIAM for client visibility.
• Design and refine Data Models/Parsers for accurate data representation.
• Collaborate with clients to scope Alert Automation (PSC) and Playbook implementations.
• Advise on Threat Intel Management and integrate sources for better detection.
• Define requirements for Custom Widgets and reports, potentially via extended expertise.
• Lead SOC Transformation initiatives to modernize security operations.
• Produce comprehensive documentation including architecture, configuration guides, and runbooks.

Skills

XSIAM Deployment

SOC Operations

Threat Detection

Incident Response

Data Onboarding

Education

Bachelor's degree in Computer Science or Information Security

Tools

Cortex XSIAM

Threat Intelligence

Data Modeling

Job description

About Us:

Saddleback Solutions offer Consultancy and Professional Services to our Partners and Clients. We partner Palo Alto Networks, Juniper Networks and Arista worldwide, and we indirectly Partner AWS, so there are always lots of varying opportunities that come up. We have long standing and close relationships with our consultants and our partners so we can represent you fully. We offer free training for all our consultants should they wish to expand their knowledge and profiles while with us. We have an education services arm also, so our consultants once qualified can also offer their services running workshops or bootcamps between projects or even full time. We will support you the best way we know how.

Tasks

• Lead the Kickoff and Planning Phase for XSIAM deployments, defining project scope, objectives, timelines, and resource requirements.
• Conduct comprehensive Architectural Discovery sessions to understand client environments, security requirements, and integration points for XSIAM.
• Oversee and actively participate in the Deployment of Cortex XSIAM infrastructure, including complex multi-tenant deployments with child tenants.
• Provide expert guidance and hands‑on support for Data Source Onboarding, ensuring efficient and accurate ingestion of security telemetry into XSIAM.
• Specialize in Endpoints Tuning within the XSIAM ecosystem to optimize data quality and reduce noise for effective threat detection.
• Develop and implement sophisticated Correlation Rules to identify advanced threats and streamline alert generation.
• Leverage and configure Attack Surface Management (ASM) capabilities within XSIAM to provide clients with comprehensive visibility into their digital attack surface.
• Design, develop, and refine Data Models/Parsers to ensure accurate and actionable data representation within XSIAM.
• Collaborate with clients to identify opportunities for Alert Automation (PSC) and Playbook implementation, subject to discovery, and potentially supported by extended expertise.
• Advise on and implement best practices for Threat Intel Management within XSIAM, integrating various threat intelligence sources for enhanced detection.
• Work with clients to define requirements for and, as needed, contribute to the development of Custom Widgets and reports (to be further defined and potentially delivered through extended expertise).
• Lead and contribute to SOC Transformation initiatives, leveraging XSIAM to modernize security operations centers, streamline workflows, and enhance overall security posture.
• Produce high‑quality, comprehensive Documentation throughout the project lifecycle, including architectural designs, configuration guides, and operational runbooks.

Requirements

• Education: Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Minimum of 8 years of experience in cybersecurity, with a strong focus on Security Operations Centers (SOC), incident response, and threat detection.
• Pro