Cyber - Palo Alto SecOps - Senior Consultant

Deloitte T.T.L.
Las Vegas, NV, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services ARM Architecture Microsoft Azure Cyber Security Identity and Access Management Intrusion Detection and Prevention Security Information and Event Management Data Ingestion Palo Alto Networks Cyber Warfare Splunk

Job description

Experteer Overview In this role, you help design and operationalize Next-Generation SOC capabilities, focusing on Cortex XSIAM and related SIEM/SOAR workflows to strengthen clients’ cyber resilience. You will work with cross-functional teams to integrate data sources, automate incident response, and advise on detection use cases. The position sits within Deloitte’s Cyber Defense & Resilience practice, addressing evolving threat landscapes for a diverse client base. You’ll influence platform choices and playbooks, driving measurable security improvements. Compensation / Benefits * Lead design and deployment of Next-Gen SOC platforms (Cortex XSIAM, SIEM ingestion, SOAR playbooks) * Integrate log and telemetry sources for data quality and visibility * Develop and optimize automated response workflows for containment and remediation * Advise clients on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions and present findings to stakeholders Tasks * 4+ years in cloud, network, or identity security * 3+ years with AWS, GCP, and/or Azure and native security tools * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation, playbooks, data ingestion, and normalization * 3+ years with EDR platforms (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work * Palo Alto Networks PCNSE, CISA, CEH, or CCSP equivalents preferred * Willingness to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Global talent ecosystem and mentorship opportunities * Professional development and leadership programs * Flexible work arrangements and travel * Competitive compensation range

Requirements

_ present findings to stakeholders Tasks * 4+ years in cloud, network, or identity security * 3+ years with AWS, GCP, and/or Azure and native security tools * 3+ years with Security Operations tools/platforms (Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation, playbooks, data ingestion, and normalization * 3+ years with EDR platforms (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work * Palo Alto Networks PCNSE, CISA, CEH, or CCSP equivalents preferred * Willingness to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Global talent ecosystem and mentorship opportunities * Professional development and leadership programs * Flexible work arrangements and travel * Competitive compensation range

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all