Technical Services Lead - Cortex Xpanse Xsoar jobs at Palo Alto in India, Bengaluru

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

[Input by recruiter and audited by recruiting specialist]

Your Impact

• [Input by recruiter and audited by recruiting specialist]

Your Experience

• [Input by recruiter and audited by recruiting specialist]

The Team

[Input by recruiter and audited by recruiting specialist]

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Build Terraform code and terragrunt terragrunt
• Build automation work follow using python or go code
• Build BGP and networking monitoring/ remediation tools
• Engage with customers on escalations to provide remediation
• Software Architecture and Scalability: Design and enhance software architecture to improve scalability in networking like BGP, OSPF, service reliability, capacity, and performance
• Collaborate with development teams to ensure applications align with infrastructure requirements, focusing on scalability and reliability
• Automation and Infrastructure Provisioning: Write automation code for provisioning and operating infrastructure at a massive scale
• Work with Dev/QA teams to build pipelines and automation for delivering and deploying applications to production
• On-call Support and Incident Resolution: Participate in occasional on-call rotations to support the infrastructure
• Investigate incidents, formulate hypotheses, and identify root causes to solve issues promptly
• Write postmortem reviews and provide remediation recommendations
• Cross-Functional Collaboration: Provide technical assistance to Systems Administrators (SA), Systems Engineers (SE), Customer Support (CS), and Professional Services (PS) teams regarding the product
• Identify missing product features and communicate them to the Product Management (PM) teams
• Customer Interaction and Collaboration: Work with external parties and clients, participating in Proof of Concept (POC) and Proof of Value (POV) activities with SEs and SASE architects for customers
• Conduct customer training sessions and technical webinars
• Identify gaps and collaborate with PMs to make features accessible to customers
• Continuous Improvement: Collaborate with PMs to characterize new features and establish a vision for the product's evolution
• Actively seek ways to enhance the infrastructure, streamline processes, and improve overall system efficiency

Your Experience

• Bachelor's or higher degree in Computer Science, Engineering, or related field or equivalent military experience required
• CCIE in switching, routing
• Strong knowledge of IPv6, and Nat64, IPv6 subnetting
• Proven experience in designing, implementing, and maintaining scalable and reliable infrastructure
• Strong proficiency in automation scripting and infrastructure as code (IaC)
• Excellent problem-solving skills and the ability to troubleshoot complex issues
• Effective communication skills, both written and verbal
• Experience working in collaborative, cross-functional environments
• Demonstrated ability to lead and mentor teams
• Python/Go programming
• Additional Requirements: Availability for occasional on-call support
• Willingness to engage with customers directly and represent the technical aspects of the product

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $151600/YR - $245293/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Platinum Support Engineer, you will work firsthand with our valued Platinum customers to address their complex post-sales concerns where analysis of situations or data requires an in-depth evaluation of many factors. You’re a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You’ll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non-technical and technical professionals.

The type of Customer purchasing our Platinum Service is those who manage critical infrastructures and do require guaranteed response times as well as enhanced services for their mission-critical systems. Platinum is the first step towards offering a truly differentiated level of support starting with our high profile and largest customers.

Your Impact

• Provide post-sales technical support, configurations, troubleshooting, and standard methodologies to customers via phone, e-mail, and web
• Provide technical services around Cloud and Network Security technologies, troubleshooting and best practices observations to customers
• Meet enhanced response SLA’s for customers who purchase our Platinum Support Offering
• Handle support cases to ensure issues are recorded, tracked, resolved, and follow-ups finished in a timely manner
• Use fault isolation and root cause analysis skills to diagnose and tackle complicated technical issues
• Work to reproduce customer issues and qualify critical issues
• Work directly with ETAC and Engineering to get customer issues resolved
• Have a thorough understanding of software release and bug cycles
• Conduct multi-vendor troubleshooting
• Has visibility across the entire organization and Executive Leadership
• Publish Technical Support Bulletins and other user documentation in the Knowledge Base
• Build a positive customer experience by working closely with Development, Sales, Quality Assurance, and Marketing
• Responsible for reviewing user documentation for training materials, technical marketing collateral, manuals, problem-solving guides, etc

Your Experience

• 5+ years related experience
• Required experience with TCP IP
• Ability to independently debug broad, complex, and unparalleled networks with mixed media and protocols required
• In-depth experience in routing and switching (OSPF, BGP, VLAN)
• Experience with security (IPSEC, SSL-VPN, NAT, GRE)
• Prior experience in similar vendor Technical Support Centers
• Experience with Authentication Protocols a plus (LDAP/SAML/Radius / TACACS)
• Excellent written and verbal communication skills
• Knowledge of VM and multi cloud environment is good to have
• Experience with Cisco, Checkpoint, Juniper (NetScreen), Fortinet products, ZScaler a plus
• Advanced certifications such as CCIE/JNCIE/PCNSE - an advantage
• Flexibility to work shift hours as required, including afternoons, evenings, and weekends
• Shift timings: 6:30 AM - 3:30 PM

You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised – in fact, you’ll seek them out to ensure our clients are safely supported. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation.

Your Impact

• Perform reactive incident response functions including but not limited to - host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs)
• Examine VPN, firewall, web, database, and other log sources to identify evidence of malicious activity
• Investigate data breaches leveraging Incident Response, cyber forensic, and security orchestration technologies tools to determine source of compromises and malicious activity that occurred in client environments
• Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations
• Ability to perform travel requirements as needed to meet business demands (on average less than 20%)
• Mentorship of team members in incident response and forensics best practices

Your Experience

• 8+ years of incident response or digital forensics consulting experience with a passion for cyber security
• Strong leadership skills including experience managing a team or individuals
• Experience with leading complicated engagements including scoping, interfacing with the client, and have executed on a technical front
• Proficient in enterprise-wide, mass data acquisition and analysis on the host and network level as well as solutions for cyber forensic and Incident Response scenarios
• Experience with working efficiently on the command line and creating automation for Incident Response scenarios
• Incident response consulting experience required
• Identified ability to grow into a valuable contributor to the practice and, specifically
• Have an external presence via public speaking, conferences, and/or publications
• Have credibility, executive presence, and gravitas
• Able to have a meaningful and rapid delivery contribution
• Have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products
• Collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team
• Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field or equivalent military experience required
• Fluency in German and English required

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Principal Consultant for SOC Transformation & XSIAM Deployment, you will be a seasoned leader at the forefront of our most strategic customer engagements. You will leverage a rare blend of consultative presence, deep technical mastery, and executive influence to guide our customers through complex SOC transformations. Your primary role is to drive these large-scale programs, ensuring the successful execution of foundational elements like seamless log migration and the development of sophisticated detection strategies, to deliver measurable security outcomes in highly dynamic enterprise environments.

Your Impact

• Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM
• Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform
• Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization
• Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform
• Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats
• Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy
• Identify opportunities to enhance analyst alert handling and response through automation.
• Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement
• Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise
• Partner with Product and R&D teams to incorporate field insights into roadmap priorities

Your Experience

• A proven track record in modernizing and transforming Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR
• Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO
• Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations
• 10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments
• 8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows
• Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence
• Ability to conceive, architect, and develop effective correlation and detection rules
• Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus
• Strong expertise in Regular Expressions (Regex)
• Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus.
• PreSales is a Plus
• 20% Travel

As threats and technology evolve, we stay in step to accomplish our mission. You'll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won't wait for them to be raised, you'll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

You will work firsthand with our valued customers to address their complex post–sales concerns where analysis of situations or data requires an in–depth evaluation of many factors. You're a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You'll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non–technical and technical professionals.

You will regularly participate in technical discussions with multi–functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Your quick thinking and support to our clients provides the fast assistance they need to keep their environments secure - which means you'll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations).

Your Impact

• Provide post sales technical support, configurations, troubleshooting, and standard methodologies to customers via phone, e–mail, and web
• Remote support, deployment and knowledge transfer
• Handle support cases to ensure issues are recorded, tracked, resolved, and follow–ups finished in a timely manner
• Use fault isolation and root cause analysis skills to diagnose and tackle complicated technical issues
• Work to reproduce customer issues and qualify critical issues
• Publish Technical Support Bulletins and other user documentation in the Knowledge Base
• Build a positive customer experience by working closely with Development, Sales, Quality Assurance, and Marketing
• Responsible for reviewing user documentation for training materials, technical marketing collateral, manuals, problem solving guides, etc.
• Travel may be required to customer sites in the event of a critical situation to expedite resolution
• Work shoulder to shoulder with the Sales and Sales Engineering Teams

Your Experience

• BS/MS or equivalent experience or equivalent military experience required
• 5+ years of deep technical knowledge and technical support with a strong customer focus or related experience
• Advanced certifications such as CCIE/JNCIE/ CISSP– an advantage
• Excellent written and spoken communication skills, strength with establishing relationships
• Ability to independently debug broad, complex, and unparalleled networks with mixed media and protocols required
• Excellent interpersonal skills and the ability to work well independently and in a team
• Self–disciplined, self–managed, self–motivated and strong sense of ownership, urgency, and drive
• Passionate to learn, understand, and dissect new technology stack quickly on own
• Strong project management, time management, and organizational skills
• Strong analytical skills for interpreting business requirements and translating them into technical specifications
• Profound knowledge in networking protocols such as – TCP/IP, BGP4 (multi–homing), OSPF (multi–area), ISIS, Multicast, VOIP
• Expert working knowledge in the operation of Ethernet LAN switching protocols and standards including, VLANs, VLAN aggregation
• Experience with security (IPSEC, SSL–VPN, NAT, GRE)
• Prior experience in similar vendor Technical Support Centers
• Experience with Authentication Protocols a plus (Radius / TACACS)
• Strong history of deploying, maintaining, and troubleshooting multi–vendor (Cisco, Checkpoint, Juniper, Fortinet) firewall environments – PANW firewalls and VM–Series – A plus
• Excellent problem solving, critical thinking, communication, and teamwork skills
• Ability to clearly articulate technical issues to both technical and non–technical audiences, and explain their impact on business

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

You will work firsthand with our valued customers to address their complex post-sales concerns, where analysis of situations or data requires an in-depth evaluation of many factors. You’re a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You’ll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non-technical and technical professionals.

You will regularly participate in technical discussions with multi-functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Your quick thinking and support to our clients provides the fast assistance they need to keep their environments secure – which means you’ll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations)

Your Impact

• Provide Technical Support to customers and partners
• Provide configurations, troubleshooting, and best practices to customers
• Manage support cases to ensure issues are recorded, tracked, resolved, and follow-ups are completed in a timely manner
• Provide fault isolation and root cause analysis for technical issues
• Publish Technical Support Bulletins and other technical documentation in the Knowledge Base
• Review of technical documentation for training materials, technical marketing collateral, manuals, troubleshooting guides, etc
• Travel to customer sites in the event of a critical situation to expedite resolution as required
• Provide on-call support 24x7 on an as-needed basis

• Your Experience : Communication: Excellent written and verbal communication skills.
• Technical Support: Previous experience in a technical support environment is advantageous, along with strong exposure to support roles and working with large global customers, partners, and internal teams (such as DevOps, Engineering, QA, and Product managers).
• Scheduling: Willing to work flexible and varying shift times, including weekends and evenings.
• Technical Skills: Networking : IPSEC, TCP/IP, PKI, SSL/ TLS, HTTP/HTTPS
• Routing knowledge (BGP is a must)
• Experience working with Firewall Central Management Systems
• Working knowledge of Security services (IDS/IPS, Firewalls, etc.)
• Operating Systems : Expertise in OS systems and troubleshooting, including Windows, MAC, Linux, and IOS (debugging, editing registries, using OS built-in tools such as Event Viewer to aid in troubleshooting, file changes on Linux, etc.)
• Tools & Security : Comfortable using tools such as Chrome Developer Tools to isolate issues, capture HAR file, and perform HAR file analysis
• Authentication: Good understanding of authentication protocols (e.g., SAML, LDAP, RADIUS).
• Experience working with a multi-factor authentication security system (tokens, certificates, CAC cards, and similar)
• Proficiency in Prisma Access and GlobalProtect is a plus

You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised – in fact, you’ll seek them out to ensure our clients are safely supported. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

All your information will be kept confidential according to EEO guidelines.