Principal Consultant, SOC Transformation and XSIAM Deployment

September 26

Apply Now

Receive Emails with Similar Jobs

Palo Alto Networks

WebsiteLinkedInAll Job Openings

Cybersecurity • Enterprise • AI

Palo Alto Networks is a leading cybersecurity company that offers a comprehensive suite of products and services designed to protect networks, cloud environments, and enterprise operations from cyber threats. The company's offerings include advanced threat prevention, network security, cloud security, IoT security, endpoint protection, and managed detection and response services. With a strong emphasis on AI-driven security operations and zero trust architectures, Palo Alto Networks is recognized as a leader in enterprise firewall solutions and other areas of cybersecurity across numerous sectors worldwide. The company provides expertise in threat intelligence, incident response, and proactive assessment to help organizations secure their infrastructure and data. Their solutions cater to a variety of industries, including financial services, healthcare, manufacturing, and the public sector. Palo Alto Networks is committed to advancing cybersecurity with AI-powered precision to ensure comprehensive protection and efficient threat response.

10,000+ employees

Founded 2005

🔒 Cybersecurity

🏢 Enterprise

💰 $10M Series C on 2008-11

📋 Description

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM. • Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform. • Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization. • Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform. • Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats. • Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy. • Identify opportunities to enhance analyst alert handling and response through automation. • Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement. • Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise. • Partner with Product and R&D teams to incorporate field insights into roadmap priorities. • Provide post-sale professional services: implement new products, transition from old products to new, fix integrations and critical issues proactively.

🎯 Requirements

• A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR. • Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO. • Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations. • 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments. • 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows. • Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence. • Ability to conceive, architect, and develop effective correlation and detection rules. • Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus. • Strong expertise in Regular Expressions (Regex). • Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.) is a plus. • PreSales experience is a plus. • Willingness to travel (30%).

🏖️ Benefits

• Employees can work remotely • 30% Travel • Reasonable accommodations for qualified individuals with a disability • Equal opportunity employer; celebration of diversity