Senior Professional Services Consultant (Cortex XSIAM)

Location: Remote in California or Utah, United States; occasional travel of up to 10% for on-site customer meetings, workshops, and technical kickoffs. Immigration sponsorship is not available.

Salary: $175,200–$240,900 per year, plus potential restricted stock units and bonus.

Company

Cybersecurity organization focused on protecting digital environments through cybersecurity platforms, AI-enabled technology, and customer-focused solutions.

What you will do

• Design and execute strategies for onboarding, ingesting, and parsing enterprise log sources into Cortex XSIAM.
• Build and tune correlation and detection rules across endpoint, network, and cloud environments.
• Analyze manual SOC processes and convert them into scalable automation playbooks.
• Develop Python integrations connecting Cortex XSIAM with third-party security tools and RESTful APIs.
• Deploy content packs, custom layouts, and automated dashboards for customer security use cases.
• Lead technical workshops, define security metrics and automation roadmaps, and create technical design documentation.

Requirements

• 6+ years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel.
• 4+ years of experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers.
• Experience building playbooks, configuring correlation rules, and managing Cortex content and integrations.
• Proficiency in Python, Regex, RESTful APIs, JSON, and third-party security integrations.
• Strong technical presentation, documentation, analytical, troubleshooting, and consultative customer skills.
• Must be based in California or Utah and able to travel occasionally within the stated requirements.

Nice to have

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Palo Alto Networks credentials such as PCNSE, PCDRA, or XSOAR/XSIAM certifications.
• CISSP, GIAC, or vendor SIEM qualifications.

Culture & Benefits

• Remote work with collaboration across geographies.
• Employee benefits, with potential restricted stock units and bonus.
• Inclusive environment focused on collaboration, execution, integrity, and innovation.
• Reasonable accommodations are available for qualified individuals with disabilities.