Cyber - Palo Alto SecOps - Senior Consultant

Experteer Overview In this role you help clients strengthen their cyber resilience by leading Next-Generation SOC initiatives. You will design and deploy SOC platforms like Cortex XSIAM, drive advanced detection and SIEM/SOAR capabilities, and ensure data quality and visibility across log sources. You’ll advise on threat use cases, automation strategies, and threat intel integration while collaborating with cross-functional teams. This position offers the chance to shape security operations for diverse clients and advance Deloitte’s Cyber Defense & Resilience offerings. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM) * Develop advanced detection rules and manage SIEM ingestion * Create and optimize SOAR playbooks and automated response workflows * Integrate log and telemetry sources for data normalization and visibility * Advise clients on threat detection use cases and SOC capabilities * Collaborate with cross-functional teams to enhance solutions and present findings Tasks * Bachelor’s degree in a technical field * 4+ years in cloud, network, or identity security with AWS, GCP, Azure experience * 3+ years with SOC tools/platforms including Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM * 3+ years in SOC operations: detection engineering, automation, data ingestion, and data manipulation * 3+ years with EDR platforms (Microsoft Defender, Cortex XDR, CrowdStrike) and governance/compliance work * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for disabilities * opportunity to work with leading security platforms * travel flexibility (50% travel) * collaborative, inclusive culture * professional development opportunities

enhance solutions and present findings Tasks * Bachelor’s degree in a technical field * 4+ years in cloud, network, or identity security with AWS, GCP, Azure experience * 3+ years with SOC tools/platforms including Cortex XSIAM, Cortex XDR, Splunk, or similar SIEM * 3+ years in SOC operations: detection engineering, automation, data ingestion, and data manipulation * 3+ years with EDR platforms (Microsoft Defender, Cortex XDR, CrowdStrike) and governance/compliance work * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for disabilities * opportunity to work with leading security platforms * travel flexibility (50% travel) * collaborative, inclusive culture * professional development opportunities