Principal Consultant – SOC Transformation and XSIAM Deployment

September 28

🏄 California – Remote

Although this job is listed in California, this company may be open to hiring remote in other states.

💵 $163k - $224.5k / year

⏰ Full Time

🔴 Lead

💼 Consultant

🦅 H1B Visa Sponsor

Apply Now

Receive Emails with Similar Jobs

Palo Alto Networks

WebsiteLinkedInAll Job Openings

Cybersecurity • Enterprise • AI

Palo Alto Networks is a leading cybersecurity company that offers a comprehensive suite of products and services designed to protect networks, cloud environments, and enterprise operations from cyber threats. The company's offerings include advanced threat prevention, network security, cloud security, IoT security, endpoint protection, and managed detection and response services. With a strong emphasis on AI-driven security operations and zero trust architectures, Palo Alto Networks is recognized as a leader in enterprise firewall solutions and other areas of cybersecurity across numerous sectors worldwide. The company provides expertise in threat intelligence, incident response, and proactive assessment to help organizations secure their infrastructure and data. Their solutions cater to a variety of industries, including financial services, healthcare, manufacturing, and the public sector. Palo Alto Networks is committed to advancing cybersecurity with AI-powered precision to ensure comprehensive protection and efficient threat response.

10,000+ employees

Founded 2005

🔒 Cybersecurity

🏢 Enterprise

💰 $10M Series C on 2008-11

📋 Description

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM • Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform • Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization • Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform • Architect and implement sophisticated detection strategies and correlation rules • Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy • Identify opportunities to enhance analyst alert handling and response through automation • Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement • Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise • Partner with Product and R&D teams to incorporate field insights into roadmap priorities

🎯 Requirements

• Proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR • Exceptional executive presence, with strong verbal and written communication skills • Experience acting as a trusted advisor to senior security leaders • 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments • 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows • Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence • Ability to conceive, architect, and develop effective correlation and detection rules • Familiarity with SIEM technologies such as Splunk and IBM QRadar is a plus • Strong expertise in Regular Expressions (Regex) • Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.) is a plus • Must be able to travel up to 30%

🏖️ Benefits

• This role is remote • The offered compensation may include restricted stock units • The offered compensation may include a bonus • A description of our employee benefits may be found here • Reasonable accommodations for qualified individuals with a disability • Hybrid teams collaborate across geographies