> Markdown version of [/jobs/ext/2017352-cyber-palo-alto-secops-senior-consultant](https://www.wearedevelopers.com/jobs/ext/2017352-cyber-palo-alto-secops-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber - Palo Alto SecOps - Senior Consultant - **Company:** Deloitte T.T.L. - **Location:** San Antonio, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, ARM Architecture, Microsoft Azure, Cloud Computing Security, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Security Information and Event Management, Data Processing, Google Cloud, Information Technology, Cyber Warfare, Splunk - **Published:** August 10, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/cyber-palo-alto-secops-senior-consultant-san-antonio-tx-usa-58882062 ## About the Role response. * Advise clients on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings to client stakeholders Tasks * Bachelor in Computer Science, Cybersecurity, or another technical field * 4+ years in cloud, network, or identity security with 3+ years in AWS, GCP, Azure, and native security tools * 3+ years of experience with SOC tools/platforms (Cortex XSIAM, Cortex XDR, Splunk or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation/playbook development, and data handling * 3+ years of EDR experience (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work using established frameworks * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Travel flexibility * Professional development opportunities ## Description Experteer Overview In this role, you help shape next-generation security operations for clients by deploying advanced SOC platforms and automating response. You'll work with cross-functional teams to integrate data sources, tune detections, and drive threat-informed security outcomes. The position combines technical delivery with advisory work to strengthen client cyber resilience. This is a client-facing consulting opportunity at Deloitte's Cyber Defense & Resilience practice, offering exposure to premier security technologies and real-world incident management. You will contribute to impactful security programs and help clients stay ahead of evolving threats. Compensation / Benefits * Lead design and deployment of Next-Generation SOC platforms (Cortex XSIAM), including detection rules, SIEM ingestion, and SOAR playbooks * Integrate log and telemetry sources to ensure data quality, normalization, and visibility * Develop and optimize automated response workflows for containment and remediation * Advise clients on threat detection use cases, automation strategies, and SOC capabilities * Collaborate with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings to client stakeholders Tasks * Bachelor in Computer Science, Cybersecurity, or another technical field * 4+ years in cloud, network, or identity security with 3+ years in AWS, GCP, Azure, and native security tools * 3+ years of experience with SOC tools/platforms (Cortex XSIAM, Cortex XDR, Splunk or similar SIEM) * 3+ years in SOC roles covering detection engineering, automation/playbook development, and data handling * 3+ years of EDR experience (Microsoft Defender, Cortex XDR, CrowdStrike) and governance, risk, or compliance work using established frameworks * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * Discretionary annual incentive program * Reasonable accommodations for disabilities * Travel flexibility * Professional development opportunities ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)