> Markdown version of [/jobs/ext/2011978-cyber-palo-alto-secops-senior-consultant](https://www.wearedevelopers.com/jobs/ext/2011978-cyber-palo-alto-secops-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber - Palo Alto SecOps - Senior Consultant

- **Company:** Deloitte T.T.L.
- **Location:** Portland, OR, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, ARM Architecture, Microsoft Azure, Cyber Security, Data Normalization, Identity and Access Management, Intrusion Detection and Prevention, Security Information and Event Management, Data Processing, Google Cloud, Data Ingestion, Information Technology, Palo Alto Networks, Splunk
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cyber-palo-alto-secops-senior-consultant-portland-or-usa-58882052

## About the Role

normalization, ingestion, and data manipulation in security platforms * Guide clients on incident containment and remediation workflows Tasks * Bachelor in Computer Science or related technical field * 4+ years in cloud, network, or identity security (with AWS, GCP, Azure) * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years SOC experience in detection engineering, automation, playbook development, data ingestion and data normalization * 3+ years of experience with EDR platforms (Microsoft Defender, Cortex XDR, or CrowdStrike) and governance/comp assumptions * Palo Alto Networks PCNSE, CCSP, CEH, CISSP or equivalent certifications (preferred) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Travel opportunities (~50% depending on client engagement) * Accommodations for people with disabilities * Professional development and mentorship aaaaa
security * Deloitte culture of collaboration and inclusion * Exposure to diverse clients and complex security challenges

## Description

Experteer Overview In this role you will help clients strengthen cyber resilience by leading the design and deployment of Next-Generation SOC platforms (including Cortex XSIAM). You will integrate diverse log sources, optimize automated responses, and advise on threat detection use cases. You'll work with cross-functional teams to enhance solutions and present findings to client stakeholders. This role offers opportunities to shape security operations and drive impactful outcomes for clients. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM) * Develop advanced detection rules and manage SIEM ingestion * Create and optimize SOAR playbooks for automated response * Integrate log and telemetry sources to improve data quality and visibility * Advise on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions and present recommendations to clients * Support data normalization, ingestion, and data manipulation in security platforms * Guide clients on incident containment and remediation workflows Tasks * Bachelor in Computer Science or related technical field * 4+ years in cloud, network, or identity security (with AWS, GCP, Azure) * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years SOC experience in detection engineering, automation, playbook development, data ingestion and data normalization * 3+ years of experience with EDR platforms (Microsoft Defender, Cortex XDR, or CrowdStrike) and governance/comp assumptions * Palo Alto Networks PCNSE, CCSP, CEH, CISSP or equivalent certifications (preferred) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Travel opportunities (~50% depending on client engagement) * Accommodations for people with disabilities * Professional development and mentorship opportunities * Deloitte culture of collaboration and inclusion * Exposure to diverse clients and complex security challenges


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)