> Markdown version of [/jobs/ext/587903-cortex-xsiam-extended-expertise-consultant-automation](https://www.wearedevelopers.com/jobs/ext/587903-cortex-xsiam-extended-expertise-consultant-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cortex XSIAM - Extended Expertise Consultant (Automation)

- **Company:** Palo Alto Networks
- **Location:** United States (Remote available)
- **Salary:** $140,000.0 - $192,500.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), ARM Architecture, Unix, Cyber Security, Linux, DevOps, Intrusion Detection Systems, Python (Programming Language), Network Troubleshooting, Systems Integration, Security Orchestration, Automation & Response
- **Published:** June 16, 2026
- **Apply:** https://dejobs.org/x/x/A1AA72007B21417BA5DF9E5503A2D9BB/job/

## About the Role

* Experience in Python and/or Javascript
 * Experience managing complex security solutions in large environments
 * Strong understanding of Linux or Unix, network troubleshooting analysis and current security threats
 * Experience in cybersecurity incident response
 * Strong understanding of cybersecurity technologies, protocols and applications
 * Detailed technical experience in the installation, configuration, and operation of high-end security solutions
 * Experience with IDS/IPS, SEIM, Endpoint solutions and technologies
 * Excellent written and verbal communication skills
 * GCIA, CISSP, and/or DevOps certifications is a plus
 * Bachelor's degree or equivalent military experience required

## Description

As an Extended Expertise Consultant (EEC) for Cortex XSIAM (Automation Persona), you will serve as the long-term, dedicated Subject Matter Expert (SME) and trusted advisor for our most strategic customers. This is a high-impact consulting role that requires a unique blend of deep technical automation expertise and elite soft skills. Cortex XSIAM orchestration enables security teams to ingest alerts across sources and execute standardized, automatable playbooks for accelerated incident response. You will act as an extension of the customer's team, guiding their long-term automation strategy and ensuring they realize the full value of the XSIAM platform., * Assist customers with their Incident Response efforts leveraging Cortex XSIAM for Security Orchestration, Automation, and Response.

 * Learn and understand the customer's business requirements and the threat landscape that is most applicable to their industry's vertical sector.
 * Lead Cortex XSIAM technical automation implementation and operations in a customer environment.
 * Interact with Security and IT technologies relating to the customer environment to build seamless integrations.


## Related Videos

- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)
- [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)