Senior XSIAM Consultant/Engineer
Posted 1hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior XSIAM Consultant/Engineer deploying and optimizing Palo Alto Cortex XSIAM for EMEA clients. Leading SOC transformation, threat detection, automation, and security operations engagements.
Responsibilities:
- Lead kickoff and planning phases for XSIAM deployments, defining scope, objectives, timelines, and resource requirements
- Conduct architectural discovery sessions covering client environments, security requirements, and integration points
- Oversee and participate in Cortex XSIAM infrastructure deployments, including complex multi-tenant deployments with child tenants
- Guide and support data source onboarding for security telemetry ingestion into XSIAM
- Tune endpoints to optimize data quality and reduce noise
- Develop and implement correlation rules for advanced threat detection and alert generation
- Configure Attack Surface Management capabilities to provide digital attack-surface visibility
- Design, develop, and refine data models and parsers
- Identify alert automation and playbook opportunities and contribute to implementation as needed
- Implement threat intelligence management best practices and integrate threat intelligence sources
- Define requirements for and contribute to custom widgets and reports
- Lead and contribute to SOC transformation initiatives using XSIAM
- Produce documentation including architectural designs, configuration guides, and operational runbooks
Requirements:
- Bachelor's degree in Computer Science, Information Security, or a related field
- Minimum of 8 years of experience in cybersecurity, with a strong focus on Security Operations Centers (SOC), incident response, and threat detection
- Proven experience leading and delivering complex cybersecurity extended expertise engagements
- Demonstrable expertise deploying, configuring, and optimizing Palo Alto Networks Cortex XSIAM
- Extensive experience with SIEM platforms, SOAR technologies, and endpoint security solutions
- Hands-on experience with data source integration, parsing, and data model creation
- Proficiency in scripting languages such as Python for automation and data manipulation is a plus
- Deep understanding of security frameworks such as MITRE ATT&CK and NIST
- Expertise in network security, endpoint security, cloud security, and threat intelligence
- Strong analytical and problem-solving skills with ability to troubleshoot complex technical issues
- Familiarity with AWS, Azure, GCP, and containerization technologies is highly desirable
- Exceptional written, verbal, and presentation skills
- Strong interpersonal skills and ability to build client rapport and trust
- Excellent organizational and project management abilities
- Ability to work independently and as part of a distributed team
- Proactive, results-oriented mindset with commitment to client success
- Preferred certifications: PCNSE, PCSAE, CISSP, CISM, GCIH, or GCFA
Benefits:
- Free training for all consultants
- Opportunity for qualified consultants to run workshops or bootcamps between projects or full time
- Support from Saddleback Solutions throughout engagements
















