Full-Time Principal Consultant - SOC Transformation & XSIAM

As a Principal Consultant for SOC Transformation & XSIAM Deployment, you will be a seasoned leader at the forefront of our most strategic customer engagements.

Your primary role is to drive these large-scale programs, ensuring the successful execution of foundational elements like seamless log migration and the development of sophisticated detection strategies.

Your Impact:

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM
• Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform
• Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization
• Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform
• Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats
• Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy
• Identify opportunities to enhance analyst alert handling and response through automation
• Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement
• Build and mentor high-performing professional services teams
• Partner with Product & R&D teams to incorporate field insights into roadmap priorities

Your Experience:

• A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection
• Exceptional executive presence, with strong verbal and written communication skills
• Experience acting as a trusted advisor to senior security leaders
• 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions
• 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows
• Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence
• Ability to conceive, architect, and develop effective correlation and detection rules
• Familiarity with SIEM technologies, such as Splunk and IBM QRadar, is a plus
• Strong expertise in Regular Expressions (Regex)
• Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus
• Must be able to travel up to 30%

What is the last date for applying to the job?

Which countries are accepted for this remote job?