Palo Alto Networks XSIAM Expert / Engineer

Position: Palo Alto Networks XSIAM Expert / Engineer

Location: Remote

Hiring Mode: 12+ Months Contract

Job Description:

We are seeking a highly skilled Palo Alto Networks XSIAM Expert to lead the design, deployment, and optimization of security operations using XSIAM (Extended Security Intelligence & Automation Management). This role will focus on modernizing SOC capabilities through automation, AI-driven analytics, and integrated security workflows.

Key Responsibilities

• Lead implementation and administration of Palo Alto Networks XSIAM platform
• Design and optimize SOC workflows, automation, and incident response playbooks
• Integrate XSIAM with existing tools (SIEM, SOAR, EDR, firewalls, cloud platforms)
• Develop and tune detection rules, correlation logic, and analytics
• Build and maintain automation playbooks to reduce manual SOC effort
• Perform threat hunting and incident investigations using XSIAM data lake
• Collaborate with security, network, and cloud teams to improve visibility and response
• Monitor platform performance and ensure data ingestion pipelines are optimized
• Provide guidance on security best practices, MITRE ATT&CK mapping, and threat modeling
• Mentor junior analysts and engineers on XSIAM capabilities

Required Qualifications

5+ years of experience in Cybersecurity / SOC / SIEM / SOAR

Hands-on experience with Palo Alto Networks XSIAM (or Cortex XDR/XSOAR as a foundation)

Strong understanding of:

• SIEM/SOAR concepts
• Threat detection and response
• Log ingestion and normalization
• Experience with query languages (e.g., XQL preferred)
• Familiarity with MITRE ATT&CK framework
• Experience integrating security tools and APIs
• Strong knowledge of networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Qualifications

Experience with:

• Palo Alto Cortex XDR / XSOAR / Prisma Cloud
• Cloud platforms (AWS, Azure, Google Cloud Platform)
• Scripting (Python, PowerShell)
• Relevant certifications:
• Palo Alto Networks (PCSAE, PCCSE, Cortex certifications)
• CISSP, GCIA, GCIH (nice to have)

Key Skills

• Security Operations & Incident Response
• Threat Hunting & Detection Engineering
• Automation & Orchestration
• Data Analysis & Log Correlation
• Strong problem-solving and communication skills

Nice-to-Have Experience

• Migrating from legacy SIEM to XSIAM
• Building AI-driven SOC workflows
• Handling large-scale security data environments