Senior XSIAM Consultant/Engineer

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior XSIAM Consultant/Engineer deploying and optimizing Palo Alto Cortex XSIAM for EMEA clients. Leading SOC transformation, threat detection, automation, and security operations engagements.

Responsibilities:

  • Lead kickoff and planning phases for XSIAM deployments, defining scope, objectives, timelines, and resource requirements
  • Conduct architectural discovery sessions covering client environments, security requirements, and integration points
  • Oversee and participate in Cortex XSIAM infrastructure deployments, including complex multi-tenant deployments with child tenants
  • Guide and support data source onboarding for security telemetry ingestion into XSIAM
  • Tune endpoints to optimize data quality and reduce noise
  • Develop and implement correlation rules for advanced threat detection and alert generation
  • Configure Attack Surface Management capabilities to provide digital attack-surface visibility
  • Design, develop, and refine data models and parsers
  • Identify alert automation and playbook opportunities and contribute to implementation as needed
  • Implement threat intelligence management best practices and integrate threat intelligence sources
  • Define requirements for and contribute to custom widgets and reports
  • Lead and contribute to SOC transformation initiatives using XSIAM
  • Produce documentation including architectural designs, configuration guides, and operational runbooks

Requirements:

  • Bachelor's degree in Computer Science, Information Security, or a related field
  • Minimum of 8 years of experience in cybersecurity, with a strong focus on Security Operations Centers (SOC), incident response, and threat detection
  • Proven experience leading and delivering complex cybersecurity extended expertise engagements
  • Demonstrable expertise deploying, configuring, and optimizing Palo Alto Networks Cortex XSIAM
  • Extensive experience with SIEM platforms, SOAR technologies, and endpoint security solutions
  • Hands-on experience with data source integration, parsing, and data model creation
  • Proficiency in scripting languages such as Python for automation and data manipulation is a plus
  • Deep understanding of security frameworks such as MITRE ATT&CK and NIST
  • Expertise in network security, endpoint security, cloud security, and threat intelligence
  • Strong analytical and problem-solving skills with ability to troubleshoot complex technical issues
  • Familiarity with AWS, Azure, GCP, and containerization technologies is highly desirable
  • Exceptional written, verbal, and presentation skills
  • Strong interpersonal skills and ability to build client rapport and trust
  • Excellent organizational and project management abilities
  • Ability to work independently and as part of a distributed team
  • Proactive, results-oriented mindset with commitment to client success
  • Preferred certifications: PCNSE, PCSAE, CISSP, CISM, GCIH, or GCFA

Benefits:

  • Free training for all consultants
  • Opportunity for qualified consultants to run workshops or bootcamps between projects or full time
  • Support from Saddleback Solutions throughout engagements