Senior Professional Services Consultant – Cortex XSIAM, SIEM & Automation

Palo Alto Networks

. Deliver end-to-end Security Operations Center modernization across SIEM and SOAR capabilities .

Posted 10/6/2026full-timeRemote • United StatesSenior💰 $175,200 - $240,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Operations Center modernization, focusing on SIEM and SOAR capabilities, with a strong emphasis on log migration, automation, and integration of security tools. Proficient in Python scripting and technical documentation, with a consultative approach to addressing customer security challenges.

Highest-signal resume keywords

Cortex XSIAM ExpertiseSIEM Solutions DeploymentPython Integration and AutomationLog Parsing with RegexIncident Response Lifecycle Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEM SolutionsCortex XSIAMPythonRegexRESTful APIsLog MigrationCorrelation RulesContent ManagementAutomation PlaybooksTechnical Design Documentation

Soft Skills

Exceptional Written CommunicationVerbal Presentation SkillsAnalytical MindsetProactive Consultative Approach

Tools & Technologies

SplunkIBM QRadarMicrosoft SentinelCortex EcosystemThird-Party Security Tools

Certifications & Qualifications

PCNSEPCDRAXSOAR/XSIAM CertificationsCISSPGIAC

Industry Keywords

Security Operations CenterIncident ResponseLog ArchitectureCloud SecurityNetwork SecurityEndpoint Security

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunk

About the role

Key responsibilities & impact

Deliver end-to-end Security Operations Center modernization across SIEM and SOAR capabilities
Guide enterprise customers through log migration
Design strategies for onboarding, ingesting, and parsing log sources into Cortex XSIAM
Build and fine-tune correlation and detection rules across endpoint, network, and cloud environments
Monitor and tune log source performance, ingestion rates, and detection logic
Transform manual SOC processes into automated, scalable workflows using XSIAM automation playbooks
Write custom Python integrations connecting Cortex XSIAM with third-party security tools and RESTful APIs
Deploy and manage content packs, custom layouts, and automated dashboards for customer security use cases
Serve as a subject-matter expert on Cortex XSIAM, SIEM log architecture, correlation logic, and SOAR automation best practices
Partner with security stakeholders to define security metrics and strategic automation roadmaps
Conduct technical workshops and produce technical design documentation to enable customer autonomy
Travel occasionally for on-site customer meetings, strategic workshops, and technical kickoffs

Requirements

What you’ll need

6+ years of hands-on experience deploying, integrating, and managing enterprise SIEM solutions such as Splunk, IBM QRadar, or Microsoft Sentinel
4+ years of direct experience with SOC tooling, incident response lifecycles, and security analysis across cloud, endpoint, and network layers
Proven experience building playbooks, configuring correlation rules, and managing content and integrations within the Cortex ecosystem
Proficiency in Python for security tool integration and automation scripting
Strong Regex capabilities for log parsing
Experience with RESTful APIs, JSON data structures, and third-party security integrations
Exceptional written and verbal presentation skills
Track record of authoring clear technical design documentation
Strong analytical mindset capable of independently troubleshooting complex technical workstreams and integration flows
Proactive, consultative approach to understanding customer challenges and translating them into actionable engineering requirements
Ability to travel occasionally, up to 10%, for on-site customer meetings, strategic workshops, and technical kickoffs
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience is preferred
Palo Alto Networks credentials such as PCNSE, PCDRA, or specialized XSOAR/XSIAM certifications are preferred
Industry credentials such as CISSP, GIAC, or vendor SIEM qualifications are preferred
Applicants must not require immigration sponsorship; the position does not sponsor work visas

Benefits

Comp & perks

Restricted stock units
Bonus
Employee benefits are referenced in the posting
Reasonable accommodations for qualified individuals with disabilities or special needs