Security Operations Consultant (PAN India)

Location: Bangalore, Chennai, Hyderabad, Mumbai, Pune, Kolkata, Noida

Years of Experience: 3-5 Years

Prerequisite skills: Palo Alto Cortex XDR / XIEM and SOC (L2 Support)

Job Description:

The Security Operations Consultant - Palo Alto Cortex Suite is responsible for managing and optimizing the deployment, configuration, and operational performance of Palo Altos advanced security platformsXSIAM, XDR, and Cortex Data Lake. This role plays a critical part in enhancing threat detection, incident response, and overall SOC efficiency.

Key Responsibilities:

Platform Operations & Management

• Administer and maintain Palo Alto Cortex XSIAM and XDR environments
• Manage data ingestion pipelines into Cortex Data Lake
• Ensure high availability, scalability, and performance of the platforms

Threat Detection & Response

• Develop and tune detection rules, playbooks, and automation workflows
• Monitor alerts and incidents generated by XDR and XSIAM
• Collaborate with SOC analysts to investigate and respond to threats

Integration & Automation

• Integrate Cortex Suite with other security tools (SIEM, SOAR, EDR, etc.)
• Automate repetitive tasks using Cortex playbooks and APIs
• Support onboarding of new log sources and data connectors

Analytics & Reporting

• Generate dashboards and reports on threat trends, system health, and SOC metrics
• Perform root cause analysis and post-incident reviews
• Provide insights to improve detection coverage and reduce false positives

Governance & Compliance

• Ensure platform configurations align with security policies and compliance standards
• Support audit and regulatory reporting requirements
• Maintain documentation for operational procedures and configurations.

Required Skills & Qualifications:

• Bachelors degree in Cybersecurity, Computer Science, or related field
• 5+ years of experience in SOC or security engineering roles
• Hands-on experience with Palo Alto Cortex XSIAM, XDR, and Data Lake
• Strong understanding of threat detection, incident response, and log management
• Familiarity with scripting (Python, PowerShell) and automation tools
• Knowledge of MITRE ATT&CK, NIST, and other security frameworks

Preferred Certifications:

• Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)
• Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)
• CISSP, CEH, or equivalent