Palo Alto XSIAM SME

Position: Palo Alto XSIAM SME
Duration: Full Time
Work Location: Remote

Job Summary

We are seeking an experienced Palo Alto XSIAM Subject Matter Expert (SME) to support and enhance Security Operations Center (SOC) capabilities across 24x7 Managed Security Services (MSS) and Incident Response (IR) environments.

The XSIAM SME will focus on improving SOC operational efficiency through playbook development, detection engineering, dashboards, reporting, and investigation automation. The consultant will also contribute to Palo Alto Networks (PANW) alliance initiatives, developing reusable accelerators and supporting client engagement around Cortex XSIAM and Cortex Cloud.

Key Responsibilities

• Provide expert-level support for Palo Alto Cortex XSIAM within 24x7 SOC and MSS environments.

• Support Incident Response (IR) activities and help accelerate security investigations.

• Develop and enhance XSIAM/XSOAR playbooks and automation to improve analyst efficiency and investigation velocity.

• Perform and support detection engineering, including development and optimization of security detections.

• Design, enhance, and maintain SOC dashboards to improve visibility into security operations and performance.

• Develop and maintain operational and management reporting related to SOC activities.

• Identify opportunities to streamline SOC processes and improve analyst workflows.

• Develop reusable XSIAM/XSOAR accelerators that can be rapidly deployed within customer environments.

• Create and enhance runbooks and playbooks to standardize and accelerate SOC response and deployment activities.

• Collaborate with security operations, incident response, engineering, and consulting teams to deliver measurable technical outcomes.

• Contribute technical expertise to Palo Alto Networks alliance initiatives focused on SOC, Cortex Cloud, and XSIAM.

• Support client-facing initiatives and help strengthen customer engagement around Palo Alto Networks security solutions.

• Develop technical slideware and presentation materials that clearly articulate XSIAM/XSOAR accelerators, capabilities, and use cases.

• Document technical solutions, processes, and best practices for reuse across customer engagements.

Key Deliverables

The selected consultant will contribute to measurable technical deliverables across SOC operations, including:

• XSIAM/XSOAR playbooks and automation

• SOC runbooks and operational accelerators

• Detection engineering enhancements

• SOC dashboards and reporting

• Investigation and analyst-efficiency improvements

• Reusable accelerators for customer deployments

• Technical documentation and implementation guidance

• Slideware presenting XSIAM/XSOAR accelerators and capabilities

Required Skills & Experience

• Strong hands-on experience with Palo Alto Cortex XSIAM.

• Strong experience with Cortex XSOAR and security automation.

• Experience supporting SOC operations, preferably within 24x7 MSS environments.

• Strong Incident Response and security investigation experience.

• Hands-on experience developing and enhancing security playbooks and runbooks.

• Experience with detection engineering and security detection development/tuning.

• Experience building or enhancing SOC dashboards and reporting.

• Strong understanding of SOC analyst workflows and security operations processes.

• Ability to develop reusable technical solutions and accelerators.

• Strong technical documentation and presentation skills.

• Ability to work collaboratively with technical teams, consulting teams, and clients.

Preferred Qualifications

• Experience with Palo Alto Networks Cortex Cloud.

• Experience working on Palo Alto Networks alliance or partner initiatives.

• Experience creating solutions intended for deployment across multiple customer environments.

• Strong client-facing consulting and communication skills.

• Experience developing technical presentations, solution overviews, and slideware.

• Experience improving SOC automation, investigation velocity, and analyst productivity.