وظيفة مهندس مقيم XSIAM شاغرة لدى Penta Consulting بالرياض

Senior XSIAM Consultant / Engineer

Location: Onsite, Saudi Arabia

Contract Type: 12 months (Extendable)

Industry: Banking & Financial Services

About the Role

We are seeking experienced Senior XSIAM Consultants / Engineers to join a high profile cybersecurity transformation programme for leading banking clients. This is an urgent requirement supporting the deployment and optimisation of Palo Alto Cortex XSIAM, one of the most advanced SOC-centric security platforms available today.

The successful candidate will be responsible for implementing, configuring, integrating, and optimising XSIAM solutions within complex enterprise environments. You will work closely with security operations teams, architects, and stakeholders to enhance threat detection, incident response, automation, and overall, SOC efficiency.

Key Responsibilities

• Design, deploy, configure, and support Palo Alto Cortex XSIAM solutions.
• Integrate security telemetry from endpoints, networks, cloud platforms, identity systems, and third-party security tools.
• Develop and optimise detection use cases, correlation rules, automation playbooks, and response workflows.
• Enhance SOC operations through security automation and orchestration capabilities.
• Investigate security incidents, perform threat analysis, and support incident response activities.
• Configure and maintain integrations with SIEM, SOAR, XDR, cloud, and security monitoring platforms.
• Create dashboards, reports, and operational metrics for security stakeholders.
• Collaborate with security architects and engineering teams to implement best practices.
• Support security monitoring, threat hunting, and continuous improvement initiatives.
• Produce technical documentation, knowledge transfer materials, and operational procedures.
• Participate in security workshops, client engagements, and solution design discussions.

Required Skills & Experience

Essential

• 4+ years of hands-on experience working with Palo Alto Cortex XSIAM.
• Strong experience implementing and supporting Security Operations Centre (SOC) platforms.
• Experience with: o Cortex XSIAM o Cortex XDR o Cortex XSOAR o SIEM technologies o Security analytics and threat detection
• Strong understanding of: o Security Operations (SOC) o Incident Response o Threat Hunting o Security Monitoring o Cyber Threat Intelligence
• Experience integrating endpoint, network, identity, and cloud telemetry sources.
• Knowledge of security frameworks and best practices.
• Experience creating automation workflows and orchestration playbooks.
• Strong troubleshooting and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Desirable

• Banking or Financial Services experience.
• Experience working within highly regulated environments.
• Experience with cloud security platforms (AWS, Azure, GCP).
• Knowledge of MITRE ATT&CK framework.
• Experience with scripting and automation (Python, PowerShell, API integrations).
• Relevant Palo Alto Networks certifications.

Technical Environment

The ideal candidate will have experience across:

• Palo Alto Cortex XSIAM
• Cortex XDR
• Cortex XSOAR
• SIEM Technologies
• SOAR Platforms
• XDR Platforms
• Security Analytics
• Threat Intelligence
• Endpoint Security
• Network Security
• Identity Security
• Cloud Security Monitoring
• Security Automation & Orchestration

Preferred Candidate

Profile You are a hands-on cybersecurity professional with experience across modern SOC environments and security operations technologies. You have worked with one or more Palo Alto security solutions, such as XSIAM, XSOAR, XDR, SIEM, or SOAR platforms, and are comfortable operating within fast-paced enterprise environments where security monitoring, threat detection, incident response, and automation are critical to business success.

Please note: Banking industry experience is highly desirable but not mandatory. Candidates with strong hands-on Cortex XSIAM experience will be prioritised.