XSIAM Endpoint Engineer
Core
Deploy and operationalize Palo Alto Networks' Cortex XSIAM platform, specifically managing endpoint security agents and migrating customers from legacy EDR/XDR solutions.
Role type
Senior IC Endpoint Security Engineer (Professional Services)
Builds
Production endpoint security agents and unified XSIAM tenant configurations
Domain
Cybersecurity / Endpoint Detection and Response (EDR)
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Endpoint security (EDR/XDR) agent deployment, Security policy configuration, Multi-OS management (Windows, Linux, macOS), SOC operations, Scripting for agent management
Preferred skills
Cortex XDR experience, Cortex XSIAM migration experience, Threat hunting and investigation
Technologies
Cortex XSIAM, Cortex XDR, Windows, Linux, macOS
Responsibilities
Lead migration of endpoint agents from legacy EDR/XDR to Cortex XSIAM, Implement and fine-tune endpoint security policies and exception rules, Collaborate with customer SOC teams to tune alerts and validate security posture, Assist in transitioning customers to Business-As-Usual operations
Seniority
Senior, hands-on IC