Senior XSIAM Consultant/Engineer

This is a fully remote position, open to applicants in Netherlands.

📋 Description

• Lead the initiation and planning stages for XSIAM deployments, outlining scope, objectives, timelines, and resource needs.

• Facilitate architectural discovery sessions that explore client environments, security requirements, and integration points.

• Supervise and take part in Cortex XSIAM infrastructure deployments, including intricate multi-tenant setups with child tenants.

• Provide guidance and assistance for onboarding data sources for security telemetry ingestion into XSIAM.

• Optimize endpoints to enhance data quality and minimize noise.

• Create and execute correlation rules for advanced threat detection and alert generation.

• Set up Attack Surface Management capabilities to enhance visibility of the digital attack surface.

• Design, develop, and refine data models and parsers.

• Identify opportunities for alert automation and playbook development, contributing to implementation as necessary.

• Apply threat intelligence management best practices and integrate various threat intelligence sources.

• Specify requirements for and assist in the development of custom widgets and reports.

• Lead and take part in SOC transformation initiatives utilizing XSIAM.

• Produce documentation, including architectural designs, configuration guides, and operational runbooks.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Security, or a related discipline.

• At least 8 years of experience in cybersecurity, with a strong emphasis on Security Operations Centers (SOC), incident response, and threat detection.

• Proven track record in leading and executing complex cybersecurity engagements.

• Demonstrated expertise in deploying, configuring, and optimizing Palo Alto Networks Cortex XSIAM.

• Extensive familiarity with SIEM platforms, SOAR technologies, and endpoint security solutions.

• Practical experience with data source integration, parsing, and data model creation.

• Proficiency in scripting languages like Python for automation and data manipulation is advantageous.

• In-depth understanding of security frameworks such as MITRE ATT&CK and NIST.

• Expertise in network security, endpoint security, cloud security, and threat intelligence.

• Strong analytical and problem-solving skills with the ability to troubleshoot complex technical problems.

• Familiarity with AWS, Azure, GCP, and containerization technologies is highly desirable.

• Exceptional written, verbal, and presentation skills.

• Strong interpersonal abilities and capacity to build rapport and trust with clients.

• Excellent organizational and project management skills.

• Capability to work independently and as part of a distributed team.

• Proactive, results-driven mindset with a commitment to client success.

• Preferred certifications include: PCNSE, PCSAE, CISSP, CISM, GCIH, or GCFA.

🏝️ Benefits

• Free training available for all consultants.

• Opportunities for qualified consultants to conduct workshops or bootcamps during or between projects.

• Ongoing support from Saddleback Solutions throughout engagements.