Senior Professional Services Consultant – Cortex XSIAM, SIEM & Automation

🔥 8 minutes ago

🏄 California, Utah – Remote

🏄 California – Remote ⛷️ Utah – Remote

💵 $175.2k - $240.9k / year

⏰ Full Time

🟠 Senior

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Palo Alto Networks

WebsiteLinkedInAll Job Openings

10,000+ employees

🔒 Cybersecurity

🏢 Enterprise

💰 $1M Seed Round - Morta Security on 2013-02

Cybersecurity • Enterprise

Palo Alto Networks is a global cybersecurity company that provides AI-driven platforms, products, and services to protect networks, cloud workloads, endpoints, and applications. Its portfolio includes next-generation firewalls, SASE and Prisma Cloud (CNAPP) offerings, the Cortex security operations suite (XDR, XSOAR, XSIAM), and Unit 42 threat intelligence and incident response services. Palo Alto Networks helps enterprises secure AI deployments, automate SOC workflows, and prevent, detect, and respond to sophisticated threats across hybrid and multi-cloud environments.

📋 Description

• Deliver end-to-end Security Operations Center modernization across SIEM and SOAR capabilities • Guide enterprise customers through log migration • Design strategies for onboarding, ingesting, and parsing log sources into Cortex XSIAM • Build and fine-tune correlation and detection rules across endpoint, network, and cloud environments • Monitor and tune log source performance, ingestion rates, and detection logic • Transform manual SOC processes into automated, scalable workflows using XSIAM automation playbooks • Write custom Python integrations connecting Cortex XSIAM with third-party security tools and RESTful APIs • Deploy and manage content packs, custom layouts, and automated dashboards for customer security use cases • Serve as a subject-matter expert on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR automation best practices • Partner with security stakeholders to define security metrics and strategic automation roadmaps • Conduct technical workshops and produce technical design documentation to enable customer autonomy • Travel occasionally for on-site customer meetings, strategic workshops, and technical kickoffs

🎯 Requirements

• 6+ years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel • 4+ years of direct experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers • Proven experience building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem • Proficiency in Python for security tool integration and automation scripting • Strong Regex capabilities for log parsing • Experience with RESTful APIs, JSON data structures, and third-party security integrations • Exceptional written and verbal presentation skills • Track record of authoring clear technical design documentation • Strong analytical mindset capable of independently troubleshooting complex technical workstreams and integration flows • Proactive, consultative approach to understanding customer challenges and translating them into actionable engineering requirements • Ability to travel occasionally, up to 10%, for on-site customer meetings, strategic workshops, and technical kickoffs • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience is preferred • Palo Alto Networks credentials such as PCNSE, PCDRA, or specialized XSOAR/XSIAM certifications are preferred • Industry credentials such as CISSP, GIAC, or vendor SIEM qualifications are preferred • Applicants must not require immigration sponsorship; the position does not sponsor work visas

🏖️ Benefits

• Restricted stock units • Bonus • Employee benefits are referenced in the posting • Reasonable accommodations for qualified individuals with disabilities or special needs