
Principal Consultant β SOC Transformation, XSIAM Deployment
Posted 8 hours ago

Posted 8 hours ago
This is a fully remote position, open to applicants in Illinois, +3 more locations.
β’ Act as the principal strategic advisor and subject matter expert for clients engaged in comprehensive SOC modernization utilizing XSIAM.
β’ Spearhead multinational SOC transformation initiatives, streamlining fragmented detection and response processes into a cohesive AI-driven platform.
β’ Manage enterprise-scale XSIAM deployments from the initial strategy phase to full operational implementation.
β’ Formulate and supervise log ingestion strategies to guarantee high-quality data feeds into the XSIAM platform.
β’ Design and execute detection strategies and correlation rules to combat advanced threats.
β’ Enhance log sources and correlation rules to boost system performance and detection effectiveness.
β’ Recognize opportunities for improving analyst alert handling and response through automation.
β’ Partner with teams to implement automation solutions.
β’ Develop and mentor professional services teams.
β’ Demonstrated success in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable enhancements in MTTD/MTTR.
β’ Outstanding executive presence along with strong verbal and written communication capabilities.
β’ Experience in advising senior security executives and providing strategic recommendations.
β’ Over 10 years of practical experience in deploying and integrating SIEM/security analytics solutions in extensive enterprise environments.
β’ More than 8 years of experience with SOC tools, processes, and workflows.
β’ Hands-on technical expertise across SIEM, SOAR, EDR, cloud security, and threat intelligence.
β’ Capacity to conceive, design, and develop effective correlation and detection rules.
β’ Willingness to travel up to 30%.
β’ Industry-recognized certifications such as CISSP or GIAC are preferred.
β’ Familiarity with SIEM technologies like Splunk and IBM QRadar is preferred.
β’ Must not need immigration sponsorship; the employer will not sponsor work visas.
β’ Restricted stock units may be offered.
β’ A bonus may be included.
β’ Employee benefits are available (specific benefits not detailed).
β’ Reasonable accommodations for qualified individuals with disabilities or special needs.
CVS Health
Palo Alto Networks
Palo Alto Networks
Get handpicked remote jobs straight to your inbox weekly.