XSIAM Resident Engineer

About the Role

Penta Consulting is seeking experienced Senior XSIAM Consultants / Engineers to join a high-profile cybersecurity transformation program. This contract position is based in Riyadh, Saudi Arabia, and supports leading banking clients in the urgent deployment and optimization of Palo Alto Cortex XSIAM. The role focuses on implementing, configuring, integrating, and optimizing XSIAM solutions within complex enterprise environments, enhancing threat detection, incident response, automation, and overall Security Operations Center (SOC) efficiency.

Key Responsibilities

• Design, deploy, configure, and support Palo Alto Cortex XSIAM solutions.
• Integrate security telemetry from endpoints, networks, cloud platforms, identity systems, and third-party security tools.
• Develop and optimize detection use cases, correlation rules, automation playbooks, and response workflows.
• Enhance SOC operations through security automation and orchestration capabilities.
• Investigate security incidents, perform threat analysis, and support incident response activities.
• Configure and maintain integrations with SIEM, SOAR, XDR, cloud, and security monitoring platforms.
• Create dashboards, reports, and operational metrics for security stakeholders.
• Collaborate with security architects and engineering teams to implement best practices.
• Support security monitoring, threat hunting, and continuous improvement initiatives.
• Produce technical documentation, knowledge transfer materials, and operational procedures.
• Participate in security workshops, client engagements, and solution design discussions.

Candidate Profile and Experience

The ideal candidate is a hands-on cybersecurity professional with 5-10 years of experience across modern SOC environments and security operations technologies. This role requires familiarity with one or more Palo Alto security solutions, such as XSIAM, XSOAR, XDR, SIEM, or SOAR platforms. Candidates should be comfortable operating within fast-paced enterprise environments where security monitoring, threat detection, incident response, and automation are critical.

Required Skills and Qualifications

• Demonstrated experience with Palo Alto Cortex XSIAM.
• Proficiency in integrating various security telemetry sources.
• Ability to develop and optimize detection use cases and automation playbooks.
• Experience with security incident investigation and threat analysis.
• Strong understanding of SOC operations and efficiency enhancements.

Preferred Qualifications

• Experience within the banking industry is desirable but not mandatory.
• Candidates with strong hands-on Cortex XSIAM experience will be prioritized.

Work Environment

This is a contract position based in Riyadh, Saudi Arabia, supporting high-profile banking clients. The role involves working closely with security operations teams, architects, and stakeholders to deliver advanced cybersecurity solutions.