Systems Engineer – Palo Alto Networks

Scope (Palo Alto Networks SecOps):

• Cortex XSIAM - AI-driven SecOps platform for the modern SOC;
• Cortex XDR - extended detection and response foundation with endpoint protection and multi-source correlation;
• Cortex XSOAR - security orchestration, automation, and response with case management and broad integrations;
• Cortex Xpanse - active attack surface management for discovering and prioritizing external exposures.

Key Responsibilities

• Lead technical discovery and presales qualification with partners and/or end customers to map SecOps use cases, including TDIR, SOC automation, incident response, threat hunting, and exposure/attack surface management.
• Design and propose solution architectures, including presales and project-level HLD/LLD, for Cortex XSIAM, XDR, XSOAR, and Xpanse, including integration patterns and data onboarding.
• Produce technical sizing and Bills of Materials, and contribute to technical sections of proposals, RFI/RFP responses, and Statements of Work.
• Plan and deliver technical presentations, workshops, and demonstrations, and define POC/POV success criteria and document outcomes.
• Implement and integrate SecOps solutions in delivery projects, including data source onboarding, third-party integrations, incident/case workflows, and automation/playbooks using XSOAR/XSIAM, according to agreed scope.
• Provide best-effort post-sales technical assistance and ensure structured handover to delivery or managed services teams, including documentation, assumptions, risks, runbooks, and next steps.
• Deliver Palo Alto Networks authorized trainings and/or tailored enablement sessions, and contribute to training materials and lab/demo readiness.
• Maintain technical leadership through continuous learning, hands-on labs, certifications, and tracking Cortex roadmap updates, while sharing best practices within the team.
• Typical deliverables include:
  • Solution Architecture & Design documentation, including HLD/LLD for Cortex SecOps deployments.
  • BOM, sizing, assumptions/constraints, and presales effort estimates.
  • POC/POV plan, including scope, success criteria, test plan, and results report.
  • Integration design covering data sources, collectors/brokers, API connections, and incident/case flows.
  • Operational runbooks for onboarding, tuning, incident response workflows, and escalation procedures.
  • Training materials, including agenda, labs/handouts, and knowledge transfer sessions.

Requirements:

• Bachelor’s degree in IT, Engineering, or equivalent professional experience;
• 3–5+ years of experience delivering and/or supporting security solutions, ideally in SOC or SecOps environments such as SIEM, SOAR, EDR, or XDR;
• Strong networking and security fundamentals, including TCP/IP, routing, switching, firewalling, TLS, DNS, and log management;
• Experience integrating security platforms via APIs and standard mechanisms such as syslog, webhooks, and SSO/SAML;
• Familiarity with SOC processes, including triage, investigation, containment, and remediation;
• Excellent communication, presentation, and documentation skills;
• Customer and partner-oriented mindset;
• Advanced English language skills;
• Palo Alto Networks certifications such as PCNSA or PCNSE;
• Cortex-related credentials, including XDR, XSOAR, or XSIAM, are a strong plus;
• Automation or scripting skills, such as Python, regex, and familiarity with detection concepts and frameworks like MITRE ATT&CK are an advantage;
• Experience integrating with ITSM or ticketing systems and/or third-party SIEM ecosystems;
• Previous experience delivering instructor-led trainings and facilitating technical workshops.

Why Join Us?

• Competitive salary and benefits package.
• Opportunities for professional development and career advancement.
• A supportive and inclusive work environment.
• Team-oriented culture with regular team-building events and activities.

We can't wait to meet you!

Please send us your resume at ro-hraccount@alef.com and if your CV meets the requirements, we will contact you as soon as possible. 

Thank you!