Senior XSIAM Detection Engineer - Remote

Palo Alto Networks, Inc.; Charlotte (NC); Remote; USD 135,000 - 218,000; Full time

Job summary

Palo Alto Networks, Inc. is seeking a senior security professional to advance detection engineering and automated playbooks. You will translate threat intelligence into robust detection logic, automate responses, and architect Cortex XSIAM workflows to connect data ingestion with high-fidelity detection.

Join a remote role with a hybrid-collaboration approach, solving complex security challenges for global customers and continually maturing our security operations capabilities.

Qualifications

• 5+ years in Senior SOC, Detection Eng, or Security Architecture with SIEMs, firewalls, EDR, sandboxes and SOAR.
• Hands-on experience with Detection Engineering lifecycle, rule testing and tuning.
• Experience reviewing detection logic and providing optimization feedback.
• Proven track record designing automation playbooks for threat vectors.
• Strong incident response, threat hunting, and translating threat intel into defenses.
• Proficient in Python for security automation.

Responsibilities

• Drive refinement of correlation rules; ensure detection logic meets performance and relevance standards.
• Translate threat intelligence into actionable, robust detection logic.
• Champion proactive automation and build sophisticated playbooks to address emerging security challenges.
• Architect end-to-end security lifecycle within Cortex XSIAM, connecting data ingestion, detection, and response automation.

Skills

SIEMs

Firewalls

EDR

SOAR platforms

Python

Threat intelligence

Automation playbooks

Cortex XSOAR

XSIAM

Tools

Cortex XSOAR

Cortex XSIAM

Job description

Palo Alto Networks, Inc. is seeking a senior security professional to advance detection engineering and automated playbooks. You will translate threat intelligence into robust detection logic, automate responses, and architect Cortex XSIAM workflows to connect data ingestion with high-fidelity detection.

Join a remote role with a hybrid-collaboration approach, solving complex security challenges for global customers and continually maturing our security operations capabilities.