Manager, MSIAM SOC Engineering

🔥 18 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $175.4k - $283.8k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Palo Alto Networks

WebsiteLinkedInAll Job Openings

10,000+ employees

🔒 Cybersecurity

🏢 Enterprise

💰 $1M Seed Round - Morta Security on 2013-02

Cybersecurity • Enterprise

Palo Alto Networks is a global cybersecurity company that provides AI-driven platforms, products, and services to protect networks, cloud workloads, endpoints, and applications. Its portfolio includes next-generation firewalls, SASE and Prisma Cloud (CNAPP) offerings, the Cortex security operations suite (XDR, XSOAR, XSIAM), and Unit 42 threat intelligence and incident response services. Palo Alto Networks helps enterprises secure AI deployments, automate SOC workflows, and prevent, detect, and respond to sophisticated threats across hybrid and multi-cloud environments.

📋 Description

• Lead, mentor, and manage a team of SOC and Detection Engineers • Drive career development, team retention, and operational excellence • Provide hands-on technical leadership by evaluating architectures, writing Python code, and designing complex automation playbooks • Research emerging threats, platform capabilities, and security frameworks • Identify, scope, and prioritize content packs, integrations, and automation initiatives • Own end-to-end detection and playbook development workflows • Maintain accountability for KPIs including SLA adherence, detection quality, deployment speed, and customer satisfaction • Partner with Unit 42 research teams and Cortex Engineering to translate threat research into production-ready XSIAM capabilities and platform improvements • Enforce standards for staging, testing, soft implementation, and continuous tuning • Serve as a senior technical escalation point for high-priority client engagements and architecture reviews

🎯 Requirements

• 3+ years of experience directly managing security engineering or SOC teams in an enterprise or managed services environment • 5+ years of experience across Detection Engineering, SIEM, SOAR, and EDR/XDR platforms • Strong hands-on coding proficiency, including Python • Practical experience with Detection-as-Code (DaC) • Experience with CI/CD pipelines for playbook deployment • Experience with rigorous software development lifecycles within a SOC • Profound understanding of APT attack lifecycles, including initial access, lateral movement, data exfiltration, and persistence mechanisms • Ability to design advanced correlation logic and automated workflows • Track record of driving engineering execution against defined SLAs and quality metrics • Exceptional collaborative and stakeholder communication skills • Preferred: experience leveraging AI, LLMs, or Machine Learning in SecOps • Preferred: Incident Response or Threat Hunting experience • Preferred: Cortex XSIAM or Cortex XSOAR experience • Preferred: MITRE ATT&CK experience • Must be able to work without immigration sponsorship; the employer will not sponsor work visas

🏖️ Benefits

• Restricted stock units may be included • Bonus may be included • Employee benefits are offered (specific benefits not listed) • Reasonable accommodations for qualified individuals with a disability or special need