T
Senior Security Solutions Engineer
On-siteFull-timeSecurity Solutions EngineeringIT ServicesCloud Computing
A technology solutions integrator is hiring a hands-on engineer to deliver and operate Palo Alto Cortex deployments across multiple customer environments. The role covers implementation, security integrations, automation, troubleshooting, and post-production support.
Responsibilities
- Configure and deploy Cortex XDR, XSIAM, and XSOAR environments
- Lead endpoint-agent rollouts, log-source onboarding, and integrations across customer security and IT stacks
- Tune detection rules and correlation logic to reduce noise and reflect customer threat profiles
- Build and maintain XSOAR playbooks to automate response actions and reduce manual triage
- Troubleshoot agent health, ingestion failures, integration issues, playbook errors, and detection gaps
- Write technical documentation and operational runbooks
- Escalate and manage vendor support cases through resolution
- Validate project scope against signed statements of work and identify risks before kickoff
- Support production operations for deployed and existing customer environments
Requirements
- At least 5 years of hands-on security operations or security engineering experience
- Production experience deploying and operating Palo Alto Cortex XDR, XSIAM, and/or XSOAR
- Experience taking Cortex deployments from configuration through go-live, including large-scale agent rollout, data onboarding, and integrations
- Strong troubleshooting skills across Windows, Linux, and macOS endpoints
- Solid networking fundamentals
- Proficiency in Python and/or PowerShell
- Ability to read and modify XSOAR playbooks
- Experience integrating third-party tools and APIs with SIEM or SOAR platforms
- Ability to work independently across multiple customer environments in project- and ticket-driven delivery models
- Strong technical documentation skills
Nice to have
- Cortex XDR, XSIAM, or equivalent Palo Alto certification, such as PCNSE
- Experience delivering security projects for a systems integrator, reseller, or professional services firm
- Familiarity with AWS, Azure, or GCP log-source onboarding
- Exposure to Cortex Cloud or CNAPP concepts
- Experience with another SIEM or EDR platform