Full-Time Principal Consultant – SOC Transformation & XSIAM Deployment

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM.
• Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform.
• Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization.
• Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform.
• Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats.
• Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy.
• Identify opportunities to enhance analyst alert handling and response through automation.
• Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement.
• Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise.
• Partner with Product and R&D teams to incorporate field insights into roadmap priorities.

• A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR.
• Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO.
• Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations.
• 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments.
• 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows.
• Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence.
• Ability to conceive, architect, and develop effective correlation and detection rules.
• Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.
• Strong expertise in Regular Expressions (Regex).
• Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus.

What is the last date for applying to the job?

Which countries are accepted for this remote job?