> Markdown version of [/jobs/ext/339719-xsiam-security-analyst](https://www.wearedevelopers.com/jobs/ext/339719-xsiam-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# XSIAM Security Analyst

- **Company:** Saundersscott
- **Location:** UK (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** CompTIA Security+, Cyber Security, Issue Tracking Systems, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Security Information and Event Management, Scripting, Palo Alto Networks, Security Orchestration, Automation & Response
- **Published:** June 11, 2026
- **Apply:** https://saundersscott.com/job/level-2-xsiam-security-analyst-3/

## About the Role

* Proficient in managing Palo Alto XSIAM platform alerts, incidents, and automation workflows.
 * Strong understanding of security event correlation, alert triage, and incident escalation.
 * Experience with integrating XSIAM with other security tools (SIEM, SOAR, EDR, etc.).
 * Knowledge of threat intelligence feeds, data sources, and automation scripting (Python, PowerShell, etc.).
 * Familiarity with incident response processes, including containment, eradication, and recovery., * 3+ years of experience in SOC operations or security monitoring.
 * Hands-on experience with Palo Alto XSIAM or similar SOAR/SIEM platforms.
 * Previous involvement in managing security alerts, performing initial investigations, and escalating incidents.
 * Client references from similar deployments are a plus.

Certifications & Qualifications:

 * Palo Alto Networks Certified Cybersecurity Associate (PCSA) or equivalent.
 * Certified SOC Analyst (CSA) or equivalent cybersecurity certifications (e.g., CompTIA Security+, GIAC Security Essentials)., * Strong communication skills for clear incident reporting.
 * Ability to work effectively in a global, 24/7 environment.
 * Team-oriented with a proactive approach to problem-solving.
 * Flexibility to adapt to shift rotations and peak demand periods.

Location & Flexibility:

 * Preferably based in or willing to operate across EMEA, APAC, or AMER regions.
 * Open to remote work within secure, compliant environments.

## Description

* Monitor and manage alerts generated by XSIAM in real-time.
 * Perform initial incident triage, validation, and categorization.
 * Execute predefined automation playbooks for common alerts.
 * Escalate complex incidents to Level 3 analysts with detailed context.
 * Document incident details and actions taken in ticketing systems.
 * Support the transition and knowledge sharing with Level 3 analysts.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)