Cyber risk & Security Architect - XSIAM (M/F/D)

Solution Advisor / Sales - XSIAM As a Solutions Architect for XSIAM, you’ll be responsible for the details of how to work with our XSIAM platform. You will assist our customers with how we design and implement services that operationalize the Cortex XSIAM platform within their environment. You are the technical authority and will interact directly with our customers, customer success team and professional services team to keep their digital environments secure with automation. Your skills will include understanding the customers' challenges, working with sales to understand the market, and developing the best security operations services to evolve our platform services as capabilities change. You will lead in creating the content our internal staff and partners use to perform successful engagements, enabling our customer's staff to become proficient with the use of our platform. While experience on XSIAM is desired, it is equally important to have a solid foundation in security operations' processes and capabilities. Your Impact Drive complex deals in the pre-sale stage, alongside sales engineers and sales reps Support the technical field sales engineer on POCs (proof of concept) – assist with the pre-sales process by answering technical questions, conducting POC evaluations, and working with engineering to bridge any gaps Your expertise in sales strategy, consultative discovery, and engagement execution will be pivotal in driving the success of the XSIAM solution Your ability to quickly build executive relationships, showcase XSIAM's value in addressing SOC challenges, and craft tailored proposals will directly contribute to our mission of being the cybersecurity partner of choice Your skill in collaborating across sales teams within a matrix environment will be crucial - your approach will emphasize synergies rather than takeovers, fostering an environment where combined efforts lead to superior results Work closely with product and engineering to debug and correct challenges encountered during POCs Customize and develop services to enable integration and optimization of Palo Alto Networks Cortex XSIAM platform into the customer’s security operations center (SOC), with innovative technical solutions and runbooks Provide technical assistance during pre-sales by demonstrating our ability to excel in the delivery of Cortex XSIAM Understand the customer needs and be able to define the methodology required to provide the customer appropriate guidance with customer success and hands on services provided by professional services Collaborate with peers on optimizing the holistic Cortex platform, including data lake, analytics, endpoint, threat intelligence, and attack surface management products Maintain expert-level knowledge on Palo Alto Networks Cortex XSIAM, solutions and capabilities Refine our services for efficient consumption by the PS organization and partners Develop internal IP to assist consultants and partners with delivering world class security solutions Become known as a thought leader in the operations of security technologies provided by Palo Alto Networks Create enablement and shadowing opportunities to assist our consultants to expand their skill sets Ensure delivery of PS offerings on time and under budget Creation of internal solutions to assist with knowledge management Collaborate with Product Management and Engineering teams on new products and features to ensure Customer Success and Professional Service technical readiness Be a subject matter expert (SME) and a go-to technical resource for Palo Alto Networks Cortex XSIAM Platform Develop and coach appropriate team members Travel (50-70%) for internal meetings, pre-sales support, and shadowing and customer engagements Qualifications Your Experience Strong communication (written and verbal) and presentation skills, both internally and externally Fluent English is a requirement - any other language is a plus Demonstrated project leadership skill 8+ years of deploying and integrating (SIEM) to enterprise to large enterprise-level Coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities using (SIEM) platforms Understanding of API based security and compliance standards and Unix/Linux and Windows operating systems and scripting Research, analyze and understand log sources utilized for the purpose of security monitoring, particularly security and networking devices (such as firewalls, routers, anti-virus products, proxies, and operating systems) The ability to create and develop correlation and detection rules, within a (SIEM) to support alerting capabilities Familiarity with reports on the status of the SIEM to include metrics on items such as number of logging sources - log collection rate, and other performance metrics Familiarity with architecting and building of ingestion infrastructure for up to Enterprise Scale Architectures Knowledge of Security Analysis & Response a plus, including both endpoint, network & cloud based environments SOAR based experience is a plus, such as creating scripts and playbooks to automate event enrichment and response actions using scripting languages, such as (Python, Ansible, Javascript, etc.) Certifications (CISSP, GIAC certifications, SIEM vendor related, Other Security related, Project management related) are a plus Experience developing complex technical solutions Reasonable ability to multitask Ability to lead specific customer projects Ability to execute/document solutions by self or as a team leader Pls refer to details above Pls refer to details above