Senior Professional Services Consultant – Cortex XSIAM (SIEM & Automation)
Palo Alto Networks2 days ago
Remote, United StatesSenior
Base Salary
$175k - $241k/yr
Responsibilities
- Design and execute strategies for onboarding, ingesting, and parsing customer log sources into Cortex XSIAM.
- Build and tune correlation and detection rules across endpoint, network, and cloud environments.
- Monitor and optimize log source performance, ingestion rates, and detection logic.
- Convert manual SOC processes into scalable XSIAM automation playbooks.
- Develop Python integrations connecting Cortex XSIAM with third-party security tools and RESTful APIs.
- Deploy and manage content packs, custom layouts, and automated dashboards.
- Advise customers as a subject matter expert on Cortex XSIAM, SIEM architecture, correlation logic, and SOAR automation.
- Define security metrics and strategic automation roadmaps with security stakeholders.
- Conduct technical workshops and create technical design documentation to support customer autonomy.
- Travel occasionally, up to 10%, for customer meetings, workshops, and technical kickoffs.
Requirements
- At least 6 years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel.
- At least 4 years of experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers.
- Experience building playbooks, configuring correlation rules, and managing Cortex ecosystem content and integrations.
- Proficiency in Python for security integrations and automation scripting, with strong Regex capabilities for log parsing.
- Experience with RESTful APIs, JSON data structures, and third-party security integrations.
- Strong written and verbal presentation skills, including technical design documentation.
- Ability to troubleshoot complex technical workstreams and integration flows independently.
- Consultative ability to understand customer challenges and translate them into engineering requirements.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
- Palo Alto Networks credentials such as PCNSE, PCDRA, or specialized XSOAR/XSIAM certifications are preferred.
- CISSP, GIAC, or vendor SIEM qualifications are preferred.
Benefits
- Remote work arrangement with hybrid collaboration across geographies.
- Occasional customer travel of up to 10%.
- Annual base salary range of $175,200.00–$240,900.00, with potential restricted stock units and bonus.
- Employee benefits are available through the company’s benefits program.
Tech Stack
PythonSplunk
Categories
Solutions Engineering
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.