Senior Security Engineer (Cortex)

We're hiring a hands-on delivery engineer to take Cortex deployments from initial setup through production rollout and keep them running well afterward. You'll own the technical execution of Cortex projects for our customers: standing up the platform, onboarding data sources and endpoints, tuning detections, and building automation playbooks. Once a deployment goes live, you'll also pick up operational issues for it and for other customers.Responsibilities:Configure and deploy Cortex XDR, XSIAM, and XSOAR, translating architecture and design decisions into a working environmentLead endpoint agent rollout, log source and data onboarding, and integration configuration across a customer's security and IT stackTune detection rules and correlation logic to reduce noise and align with each customer's environment and threat profileBuild and maintain XSOAR playbooks that automate response actions and reduce manual triage workTroubleshoot production issues across the platform: agent health, ingestion failures, integration breakage, playbook errors, and detection gapsWrite clear documentation and runbooksEscalate to Palo Alto support channels when an issue requires vendor involvement, and manage the case through to resolutionValidate a project's technical scope against the signed SOW before kickoff, and flag gaps or risks earlyRequirements: At least 5 years of hands-on experience in security operations or security engineering, including direct, production experience deploying and operating Palo Alto Cortex (XDR, XSIAM, and/or XSOAR) Demonstrated experience taking a Cortex deployment from initial configuration through go-live: agent rollout at scale, data source onboarding, and integration setupStrong troubleshooting ability across Windows, Linux, and macOS endpoints, plus solid networking fundamentalsScripting proficiency in Python and/or PowerShell, and comfort reading and modifying XSOAR playbooksExperience integrating third-party tools and APIs into a SIEM or SOAR platformAbility to work independently across several customer environments at once, in a project and ticket-driven delivery model rather than a single dedicated account.Strong written documentation skillsThis position is open to all candidates.