Cyber - Palo Alto SecOps - Senior Consultant

Deloitte T.T.L.
San Antonio, TX, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services ARM Architecture Microsoft Azure Cloud Computing Security Cyber Security Identity and Access Management Intrusion Detection and Prevention Security Information and Event Management Data Processing Google Cloud Information Technology Cyber Warfare
+1 more
Splunk

Job description

Experteer Overview In this role, you help shape next-generation security operations for clients by deploying advanced SOC platforms and automating response. You’ll work with cross-functional teams to integrate data sources, tune detections, and drive threat-informed security outcomes. The position combines technical delivery with advisory work to strengthen client cyber resilience. This is a client-facing consulting opportunity at Deloitte’s Cyber Defense & Resilience practice, offering exposure to premier security technologies and real-world incident management. You will contribute to impactful security programs and help clients stay ahead of evolving threats. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM), including detection rules, SIEM ingestion, and SOAR playbooks * Integrate log and telemetry sources to ensure data quality, normalization, and visibility * Develop and optimize automated response workflows for containment and remediation * Advise clients on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings to client stakeholders Tasks * Bachelor in Computer Science, Cybersecurity, or another technical field * 4+ years in cloud, network, or identity security with 3+ years in AWS, GCP, Azure, and native security tools * 3+ years of experience with SOC tools/platforms (Cortex XSIAM, Cortex XDR, Splunk or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation/playbook development, and data handling * 3+ years of EDR experience (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work using established frameworks * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Travel flexibility * Professional development opportunities

Requirements

response. * Advise clients on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings to client stakeholders Tasks * Bachelor in Computer Science, Cybersecurity, or another technical field * 4+ years in cloud, network, or identity security with 3+ years in AWS, GCP, Azure, and native security tools * 3+ years of experience with SOC tools/platforms (Cortex XSIAM, Cortex XDR, Splunk or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation/playbook development, and data handling * 3+ years of EDR experience (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work using established frameworks * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Travel flexibility * Professional development opportunities

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · WWC 2024

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

4:42 min

Container hosting options available on Google Cloud Platform

Federico Fregosi · WWC 2022

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

Videos

See all

Related articles

See all