> Markdown version of [/jobs/ext/2679230-cybersecurity-privacy-and-forensics-palo-alto-networks-xsiam-engineer](https://www.wearedevelopers.com/jobs/ext/2679230-cybersecurity-privacy-and-forensics-palo-alto-networks-xsiam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity, Privacy and Forensics - Palo Alto Networks XSIAM Engineer - **Company:** PwC - **Location:** Denver, CO, United States - **Experience:** Expert - **Salary:** $77,000.0 - $202,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, ARM Architecture, Cloud Computing Security, Cyber Security, Information Systems, Data Integrity, Digital Assets, Cryptographic Protocols, Intrusion Detection Systems, Python (Programming Language), Network Security, Network Forensics, Security Information and Event Management, Trusted Systems, Software Vulnerability Management, Scripting, Malware, Information Technology, Cybercrime, Palo Alto Networks, Performance Monitor, Restful APIs, Prisma Cloud Platform, Splunk - **Published:** August 31, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/cybersecurity-privacy-and-forensics-palo-alto-networks-xsiam-engineer/10926076 ## About the Role Experience in SOC environments Knowledge of cloud security and hybrid environments. - Familiarity with other Palo Alto Networks products (Cortex XDR, Prisma Cloud) is a plus. - Experience with other SIEM and SOAR tools is a plus (Splunk, Sentinel, etc.) - Proficiency in scripting or automation tools (e.g., Python, REST APIs) is a plus ## Description Engineer and optimize Palo Alto Networks XSIAM security operations capabilities by tuning alerts, validating rules, monitoring performance, investigating incidents, automating workflows, onboarding data sources, and integrating security tools. The role supports threat intelligence, vulnerability management, cloud and network security, forensics, intrusion detection, secure systems, documentation, and client-facing cybersecurity consulting while maintaining current knowledge of Palo Alto Networks technologies and emerging threats. The summary above was generated by AI The Opportunity As a SecOps Engineer specializing in Palo Alto Networks XSIAM or Google technologies, you will play a pivotal role in identifying and analyzing potential threats to an organization's security, managing vulnerabilities, and safeguarding sensitive information. Within our Cybersecurity practice, you will focus on protecting organizations from cyber threats through advanced technologies and strategies, enabling the resilience of digital infrastructure. As a Senior Associate, you will leverage your skills to build meaningful client connections and navigate complex situations. You will anticipate the needs of your teams and clients, delivering quality solutions while embracing ambiguity. This role involves using critical thinking to break down complex concepts and developing a deeper understanding of the business context. You will uphold professional and technical standards, fostering personal growth and enhancing your strengths. In this role at PwC, you will be at the forefront of threat intelligence and vulnerability management, using a broad range of tools and methodologies to generate new ideas and solve problems. Your work will contribute to the overall strategy, helping to protect organizations from cyber threats and confirming the security of digital assets. Responsibilities - Collaborate with security operations teams to tune and troubleshoot alerts and automate workflows using XSIAM's automation capabilities. - Conduct rule validation, performance monitoring, and incident investigations leveraging XSIAM's advanced analytics and automation features. - Provide recommendations for enhancing SOC efficiency through platform customization and automation. - Assist with onboarding new data sources and security tools integration for enriched threat visibility. - Stay current with Palo Alto Networks product updates, best practices, and emerging cybersecurity trends. - Support documentation of platform configurations, engineering processes, incident handling procedures, and automation workflows. - Identifying and analyzing potential threats to organizational security using advanced cybersecurity tools and techniques - Managing vulnerabilities to prevent cyber attacks and safeguard sensitive information - Developing secure systems and providing proactive solutions to enhance digital infrastructure resilience - Conducting research and utilizing threat intelligence to inform security strategies and recommendations - Implementing cloud security measures and encryption protocols to protect data integrity - Utilizing network forensics and intrusion detection systems to monitor and respond to security incidents - Collaborating with teams to build meaningful client connections and deliver quality cybersecurity solutions - Navigating complex situations to deepen technical skills and grow personal brand - Upholding professional and technical standards in alignment with firm guidelines and independence requirements - Embracing change and using critical thinking to solve problems and generate new ideas What You Must Have - At least a Bachelor's degree - At least 3 years of experience What Sets You Apart - Preference for at least one of the following fields of study: Accounting, Business Administration/Management, Computer Science/Information Systems, Cybersecurity, Engineering, Project/Technology Management - Demonstrating proficiency in cloud security and network security platforms - Utilizing analytical thinking to interpret complex cybersecurity data - Conducting research in cyber threat intelligence and vulnerability management - Embracing change and adapting to evolving cybersecurity landscapes - Developing skills in malware analysis and intrusion detection systems - Building meaningful client connections in cybersecurity consulting environments - Palo Alto Networks XSIAM certification or related Palo Alto Networks security certifications (PCNSE, etc.). ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)