Principal Consultant SOC Transformation and XSIAM Deployment

Palo Alto Networks

Your Impact

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM
• Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform
• Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization
• Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform
• Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats
• Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy
• Identify opportunities to enhance analyst alert handling and response through automation.
• Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement
• Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise
• Partner with Product and R&D teams to incorporate field insights into roadmap priorities

Who We Are

We believe collaboration thrives in person. That s why most of our teams work from the office full time, with flexibility when it s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.Qualifications

Your Experience

• A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR
• Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO
• Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations
• 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments
• 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows
• Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence
• Ability to conceive, architect, and develop effective correlation and detection rules
• Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.
• Strong expertise in Regular Expressions (Regex)
• Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus
• Must be able to travel up to 30%