Cyber - Palo Alto SecOps - Senior Consultant

Deloitte T.T.L.
Portland, OR, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services ARM Architecture Microsoft Azure Cyber Security Data Normalization Identity and Access Management Intrusion Detection and Prevention Security Information and Event Management Data Processing Google Cloud Data Ingestion Information Technology
+2 more
Palo Alto Networks Splunk

Job description

Experteer Overview In this role you will help clients strengthen cyber resilience by leading the design and deployment of Next-Generation SOC platforms (including Cortex XSIAM). You will integrate diverse log sources, optimize automated responses, and advise on threat detection use cases. You’ll work with cross-functional teams to enhance solutions and present findings to client stakeholders. This role offers opportunities to shape security operations and drive impactful outcomes for clients. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM) * Develop advanced detection rules and manage SIEM ingestion * Create and optimize SOAR playbooks for automated response * Integrate log and telemetry sources to improve data quality and visibility * Advise on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions and present recommendations to clients * Support data normalization, ingestion, and data manipulation in security platforms * Guide clients on incident containment and remediation workflows Tasks * Bachelor in Computer Science or related technical field * 4+ years in cloud, network, or identity security (with AWS, GCP, Azure) * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years SOC experience in detection engineering, automation, playbook development, data ingestion and data normalization * 3+ years of experience with EDR platforms (Microsoft Defender, Cortex XDR, or CrowdStrike) and governance/comp assumptions * Palo Alto Networks PCNSE, CCSP, CEH, CISSP or equivalent certifications (preferred) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Travel opportunities (~50% depending on client engagement) * Accommodations for people with disabilities * Professional development and mentorship opportunities * Deloitte culture of collaboration and inclusion * Exposure to diverse clients and complex security challenges

Requirements

normalization, ingestion, and data manipulation in security platforms * Guide clients on incident containment and remediation workflows Tasks * Bachelor in Computer Science or related technical field * 4+ years in cloud, network, or identity security (with AWS, GCP, Azure) * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years SOC experience in detection engineering, automation, playbook development, data ingestion and data normalization * 3+ years of experience with EDR platforms (Microsoft Defender, Cortex XDR, or CrowdStrike) and governance/comp assumptions * Palo Alto Networks PCNSE, CCSP, CEH, CISSP or equivalent certifications (preferred) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Travel opportunities (~50% depending on client engagement) * Accommodations for people with disabilities * Professional development and mentorship aaaaa security * Deloitte culture of collaboration and inclusion * Exposure to diverse clients and complex security challenges

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · World Congress 2024

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

4:42 min

Container hosting options available on Google Cloud Platform

Federico Fregosi · World Congress 2022

Videos

See all

Related articles

See all