Principal Consultant – SOC Transformation, XSIAM Deployment
Posted 3hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal Consultant leading XSIAM deployments and enterprise SOC transformations at Palo Alto Networks. Modernizing detection, response, and automation for strategic cybersecurity customers.
Responsibilities:
- Serve as lead strategic advisor and subject matter expert for customers undertaking full-scale SOC modernization with XSIAM
- Lead multinational SOC transformation programs, consolidating fragmented detection and response processes into a unified AI-driven platform
- Direct enterprise-scale XSIAM deployments from initial strategy through full operationalization
- Devise and oversee log ingestion strategies to ensure high-quality data feeds the XSIAM platform
- Architect and implement detection strategies and correlation rules against advanced threats
- Optimize log sources and correlation rules for system performance and detection efficacy
- Identify opportunities to improve analyst alert handling and response through automation
- Collaborate with teams to implement automation solutions
- Build and mentor professional services teams
Requirements:
- Proven track record modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR
- Exceptional executive presence and strong verbal and written communication skills
- Experience advising senior security leaders and delivering strategic recommendations
- 10+ years of hands-on experience deploying and integrating SIEM/security analytics solutions in large enterprise environments
- 8+ years of experience with SOC tooling, processes, and workflows
- Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence
- Ability to conceive, architect, and develop effective correlation and detection rules
- Ability to travel up to 30%
- Industry-recognized certifications such as CISSP or GIAC preferred
- Familiarity with SIEM technologies such as Splunk and IBM QRadar preferred
- Must not require immigration sponsorship; employer will not sponsor work visas
Benefits:
- Restricted stock units may be included
- Bonus may be included
- Employee benefits are available (specific benefits not detailed)
- Reasonable accommodations for qualified individuals with a disability or special need

















