Principal

Overview

Principal Consultant – SOC Transformation and XSIAM Deployment. Remote role with global collaboration. You will lead large-scale SOC modernization programs, drive XSIAM deployments, and guide customers through complex transformations to deliver measurable security outcomes in dynamic enterprise environments.

Responsibilities

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM.
• Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform.
• Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization.
• Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform.
• Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats.
• Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy.
• Identify opportunities to enhance analyst alert handling and response through automation.
• Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement.
• Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise.
• Partner with Product and R&D teams to incorporate field insights into roadmap priorities.

Qualifications

• A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR.
• Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO.
• Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations.
• 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments.
• 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows.
• Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence.
• Ability to conceive, architect, and develop effective correlation and detection rules.
• Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.
• Strong expertise in Regular Expressions (Regex).
• Relevant bachelor\'s degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus.
• Must be able to travel up to 30%.

Additional Information

• The Team: Our professional services team is critical to our success and mission. You enable customer success by providing support to clients post-sale and continue to evolve with customer needs.
• Compensation Disclosure: Starting base salary typically between $163,000 - $184,000 per year for non-sales roles, plus potential RSUs and a bonus. Benefits details are provided upon offer.
• Our Commitment: We are an equal opportunity employer. We celebrate diversity in our workplace and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, gender identity or expression, genetic information, national origin, physical or mental disability, protected veteran status, or other legally protected characteristics. Reasonable accommodations are provided for qualified individuals with disabilities.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Industries: Computer and Network Security

We’re unlocking community knowledge in a new way, with experts adding insights directly into each article, started with the help of AI.