Professional Services Consultant

This is a fully remote position, open to applicants in Texas.

📋 Description

• Develop and implement comprehensive strategies for onboarding, ingesting, and processing log sources into Cortex XSIAM.

• Create and optimize correlation and detection rules across endpoint, network, and cloud domains.

• Oversee and adjust log source performance, ingestion rates, and detection methodologies.

• Assess manual SOC processes and convert them into automated, scalable workflows utilizing XSIAM automation playbooks.

• Deploy and manage content packs, custom layouts, and automated dashboards customized for customer security scenarios.

• Act as a reliable subject matter expert on Cortex XSIAM, SIEM log architecture, correlation logic, and best practices in SOAR automation.

• Collaborate with security stakeholders to establish security metrics and strategic automation roadmaps.

• Facilitate technical workshops and create technical design documentation.

• Guide intricate deployments and promote customer adoption and ongoing enhancement through real-time support.

• Work with a variety of stakeholders, from SOC analysts to CISOs, to ensure successful implementation and sustained value.

⛳️ Requirements

• A minimum of 4 years of practical experience in deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel.

• Demonstrated experience in building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem.

• Proficiency in Python for integrating security tools and scripting automation.

• Strong skills in Regex for log parsing tasks.

• Experience with RESTful APIs, JSON data structures, and third-party security integrations.

• Excellent written and verbal communication skills.

• Proven history of producing clear technical design documentation.

• Strong analytical capability to independently troubleshoot complex technical workflows and integration processes.

• A proactive and consultative approach to understanding customer needs and converting them into actionable engineering requirements.

• Willingness to travel occasionally, up to 10%, for on-site customer meetings, strategic workshops, and technical kickoffs.

• Preferred qualifications include Palo Alto Networks credentials such as PCNSE, PCDRA, or specialized XSOAR/XSIAM certifications.

• Must not require immigration sponsorship; the employer will not sponsor applicants for work visas.

🏝️ Benefits

• Restricted stock units may be included.

• Bonus opportunities may be provided.

• Reasonable accommodations for qualified individuals with disabilities or special needs are available.