Professional Services Consultant, XSIAM
Palo Alto Networks1 day ago
Remote, United StatesMid Level
Base Salary
$144k - $198k/yr
Responsibilities
- Design and execute strategies for onboarding, ingesting, and parsing log sources into Cortex XSIAM.
- Build and tune correlation and detection rules across endpoint, network, and cloud environments.
- Monitor and optimize log-source performance, ingestion rates, and detection logic.
- Convert manual SOC processes into automated workflows using XSIAM automation playbooks.
- Deploy and manage content packs, custom layouts, and automated dashboards for customer security use cases.
- Serve as a subject-matter expert on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR automation.
- Define security metrics and strategic automation roadmaps with customer stakeholders.
- Conduct technical workshops and produce technical design documentation.
- Travel occasionally, up to 10%, for customer meetings, workshops, and technical kickoffs.
Requirements
- At least 4 years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel.
- Experience building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem.
- Proficiency in Python for security-tool integration and automation scripting, with strong Regex capabilities for log parsing.
- Experience with RESTful APIs, JSON data structures, and third-party security integrations.
- Strong written and verbal presentation skills and experience authoring technical design documentation.
- Ability to independently troubleshoot complex technical workstreams and integration flows.
- A proactive, consultative approach to understanding customer challenges and translating them into engineering requirements.
- Preferred: Palo Alto Networks credentials such as PCNSE, PCDRA, or specialized XSOAR/XSIAM certifications.
Benefits
- Remote role with hybrid teams collaborating across geographies.
- Occasional travel of up to 10% for on-site customer meetings, workshops, and technical kickoffs.
Tech Stack
PythonSplunk
Categories
Solutions Engineering
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.