Cyber - Palo Alto SecOps - Senior Consultant

Deloitte T.T.L.
Colorado Springs, CO, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services ARM Architecture Microsoft Azure Cloud Computing Cyber Security Data Normalization Identity and Access Management Intrusion Detection and Prevention Security Information and Event Management Google Cloud Information Technology Splunk

Job description

Experteer Overview In this role, you help design and deploy Next-Generation SOC capabilities to strengthen clients’ cyber resilience. You will work with cross-functional teams to integrate data sources and optimize automated response workflows, focusing on Cortex XSIAM and related SIEM/SOAR technologies. You advise on threat detection approaches and SOC improvements, delivering tangible security outcomes for client operations. This opportunity offers hands-on impact in a dynamic consulting environment with exposure to leading security platforms. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM), including SIEM ingestion and SOAR playbooks * Integrate log and telemetry sources to improve data quality and visibility * Develop and optimize automated response workflows for incident containment and remediation * Advise clients on threat detection use cases and automation strategies for SOC platforms * Collaborate cross-functionally to enhance solutions, incorporate threat intelligence, and present findings to stakeholders Tasks * Bachelor’s degree in Computer Science, Cybersecurity, or another technical field * 4+ years of experience in cloud, network, or identity security (with 3+ years on AWS, GCP, Azure) including native security tools * 3+ years of Security Operations experience with Cortex XSIAM, Cortex XDR, Splunk or similar SIEM * 3+ years of SOC experience in detection engineering, automation/playbook development, log source management, data normalization/ingestion * 3+ years of EDR experience (Defender, Cortex XDR, CrowdStrike) and governance/security/compliance work; relevant certifications (e.g., PCNSE, CCSP, CISSP, CEH) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for recruiting process

Requirements

for solutions, incorporate threat intelligence, and present findings to stakeholders Tasks * Bachelor’s degree in Computer Science, Cybersecurity, or another technical field * 4+ years of experience in cloud, network, or identity security (with 3+ years on AWS, GCP, Azure) including native security tools * 3+ years of Security Operations experience with Cortex XSIAM, Cortex XDR, Splunk or similar SIEM * 3+ years of SOC experience in detection engineering, automation/playbook development, log source management, data normalization/ingestion * 3+ years of EDR experience (Defender, Cortex XDR, CrowdStrike) and governance/security/compliance work; relevant certifications (e.g., PCNSE, CCSP, CISSP, CEH) * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for recruiting process

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · WWC 2024

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

4:42 min

Container hosting options available on Google Cloud Platform

Federico Fregosi · WWC 2022

Videos

See all

Related articles

See all