Senior MSIAM SOC Engineer – Unit 42

🔥 11 minutes ago

🌲 North Carolina – Remote

🌲 North Carolina – Remote

💵 $134.6k - $217.8k / year

⏰ Full Time

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Palo Alto Networks

WebsiteLinkedInAll Job Openings

10,000+ employees

🔒 Cybersecurity

🏢 Enterprise

💰 $1M Seed Round - Morta Security on 2013-02

Cybersecurity • Enterprise

Palo Alto Networks is a global cybersecurity company that provides AI-driven platforms, products, and services to protect networks, cloud workloads, endpoints, and applications. Its portfolio includes next-generation firewalls, SASE and Prisma Cloud (CNAPP) offerings, the Cortex security operations suite (XDR, XSOAR, XSIAM), and Unit 42 threat intelligence and incident response services. Palo Alto Networks helps enterprises secure AI deployments, automate SOC workflows, and prevent, detect, and respond to sophisticated threats across hybrid and multi-cloud environments.

📋 Description

• Continuously refine correlation rules to ensure detection logic meets standards for performance, accuracy, and operational relevance • Translate Unit 42 threat intelligence research and emerging adversary TTPs into actionable detection logic • Design sophisticated automation playbooks to resolve emerging security challenges and optimize operational workflows • Architect the end-to-end security lifecycle within Cortex XSIAM • Connect data ingestion, high-fidelity detection engineering, and response automation • Review and provide optimization feedback on detection logic written by others • Guide enterprise customers through complex architectural and workflow decisions • Collaborate remotely across geographies in a hybrid team environment

🎯 Requirements

• 5+ years of hands-on experience in a Senior SOC, Detection Engineering, or Security Architecture role • Experience utilizing SIEMs, firewalls, EDR, sandboxes, and SOAR platforms • Mastery of the Detection Engineering lifecycle • Experience with rule testing frameworks, soft-deployment strategies, and continuous tuning • Experience reviewing and QA-ing detection logic written by others • Experience designing complex automation playbooks, preferably with Cortex XSOAR or similar • Strong background in incident response and threat hunting • Experience translating threat intelligence into actionable defense mechanisms • Software development experience with strong proficiency in Python for security automation • Exceptional consultative and communication skills • Ability to guide enterprise customers through complex architectural and workflow decisions • Previous experience with Cortex XSIAM preferred • Applicants must not require immigration sponsorship; the position does not sponsor work visas

🏖️ Benefits

• Restricted stock units may be included • Bonus may be included • Employee benefits are offered; details are referenced via the employer’s benefits description • Reasonable accommodations for qualified individuals with disabilities or special needs