Senior XSIAM Consultant/Engineer – EMEA

This is a fully remote position, open to applicants in Netherlands.

📋 Description

• Lead the kickoff and planning stages for XSIAM deployments, establishing scope, objectives, timelines, and necessary resources.

• Conduct architectural discovery sessions that encompass client environments, security requirements, and integrations.

• Oversee and actively engage in Cortex XSIAM infrastructure deployments, including multi-tenant setups with child tenants.

• Facilitate the onboarding of data sources and the ingestion of security telemetry into XSIAM.

• Optimize endpoints to enhance data quality and minimize detection noise.

• Create correlation rules for sophisticated threat detection and alert generation.

• Configure Attack Surface Management functionalities.

• Design and refine data models and parsers.

• Identify opportunities for alert automation and playbook development with clients.

• Provide guidance on threat intelligence management and the integration of threat intelligence sources.

• Define specifications for and potentially assist in the development of custom widgets and reports.

• Lead and participate in SOC transformation initiatives.

• Generate architectural designs, configuration guides, operational runbooks, and other project-related documentation.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Information Security, or a related discipline is required; a Master's degree is preferred.

• At least 8 years of experience in cybersecurity, with a focus on SOC, incident response, and threat detection.

• Proven experience in leading and delivering complex cybersecurity extended expertise engagements.

• Proficient in deploying, configuring, and optimizing Palo Alto Networks Cortex XSIAM.

• Extensive experience with SIEM platforms, SOAR technologies, and endpoint security solutions.

• Practical experience in data source integration, parsing, and data model creation.

• Familiarity with scripting languages such as Python for automation and data manipulation is advantageous.

• In-depth knowledge of MITRE ATT&CK, NIST, network security, endpoint security, cloud security, and threat intelligence.

• Experience with AWS, Azure, GCP, and containerization technologies is highly desirable.

• Outstanding written, verbal, communication, and presentation abilities.

• Strong interpersonal, organizational, and project management skills.

• Capability to work independently and collaboratively within a distributed team.

• A proactive, results-driven attitude and a dedication to client success.

• Preferred certifications include PCNSE, PCSAE, CISSP, CISM, GCIH, or GCFA.

🏝️ Benefits

• Complimentary training for all consultants.

• Opportunity for qualified consultants to facilitate workshops or bootcamps between projects or on a full-time basis.

• Support from the company along with strong relationships with consultants and partners.