XSIAM Automation Consultant

Entelligence is seeking an XSIAM Automation Consultant to support enterprise clients. The successful candidate must be able to work in a cross-functional environment and interact with representatives from Entelligence, the client, and the end-user.

The Consultant will provide guidance and technical expertise to clients implementing advanced security automation and orchestration solutions. You will act as the technical authority, delivering strategic guidance on complex automation architectures and playbook engineering. Interacting directly with client security teams, you will partner closely with personnel to design, build, and optimize automation workflows that accelerate incident response and enhance SOC maturity. Your deep understanding of XSIAM automation capabilities and security operations will drive the development of scalable solutions—identifying what is working, what gaps exist, and how to continuously improve security posture through intelligent automation.

RESPONSIBILITIES

• Lead security automation technical implementations in customer environments, designing and delivering complex playbook architectures and custom integrations
• Translate business and operational requirements into scalable, automated security workflows
• Analyze manual SOC processes and engineer them into automated, standardized playbooks with proper error handling and modularity
• Develop and maintain custom integrations using Python to connect XSIAM with third-party security tools and internal systems
• Design automation roadmaps with customers; establish success metrics and KPIs for measuring automation impact
• Prepare technical documentation including architecture diagrams, playbook design specifications, runbooks, and operational procedures
• Conduct technical workshops and knowledge transfer sessions to enable customer teams to manage and expand automation capabilities independently
• Manage multiple concurrent client engagements; prioritize effectively and maintain delivery quality across accounts
• Communicate effectively at all organizational levels—from SOC analysts and security engineers to CISOs and executive leadership
• Engage with the account team to ensure alignment on customer business and technical requirements through active client engagement

REQUIRED QUALIFICATIONS

• 4+ years of hands-on experience in security operations, SOAR automation, or security engineering
• Proven experience building playbooks and managing integrations within the Cortex XSOAR or XSIAM ecosystem
• Strong Python proficiency for security tool development, custom integrations, and automation scripting
• Deep understanding of incident response cycles, SOC workflows, and security operations processes
• Demonstrated experience in a consulting, professional services, or customer-facing delivery role with ability to manage multiple concurrent engagements with minimal oversight
• Detailed experience in the installation, configuration, operation, and documentation of security solutions
• Experience working in a Security Operations Center (SOC) and documenting operational workflows
• Excellent written and verbal communication skills; confirmed ability to present technical concepts to senior leaders and technical peers
• Some understanding of Linux and network troubleshooting analysis

PREFERRED QUALIFICATIONS

• XSIAM-specific experience including unified data model, correlation rules, collectors, and parsers
• Experience with additional SOAR platforms (Phantom, Swimlane, Splunk SOAR) demonstrating platform-agnostic automation thinking
• Detection engineering experience with MITRE ATT&CK mapping and use case development
• Prior experience at a Palo Alto Networks partner, VAR, or MSP
• Palo Alto Networks certifications (PCNSE, PCDRA, or XSOAR/XSIAM specialist credentials)
• Extensive experience working with security tool APIs (REST, JSON, OAuth)
• Experience with CI/CD for SOAR content, version control, and automated testing of playbooks
• Previous experience with STIGs, RMF, NIST publications, and/or SCAP
• Security certifications: GCIA, CISSP, CEH, or Security+

BENEFITS

• Competitive base salar
• Medical, dental, vision, and life insurance
• Health Savings Account (HSA) option
• Flexible Spending Accounts (FSA)
• 401(k) plan
• Vacation, sick time, and paid holidays

ABOUT ENTELLIGENCE

Since 1997, Entelligence has provided mission-critical project delivery capacity for uninterrupted growth and long-term market leadership to the industry's biggest enterprise IT brands. Our commitment to close working partnerships and a proven approach for sustainable success is why Entelligence is Always Ready to help the world's technology leaders quickly deliver their most advanced IT solutions to their most important customers.

Entelligence is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all employees and applicants for employment without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable federal, state, or local law.

#LI-Remote
#LI-JS1