Managed XSIAM Service Tech Lead
- Full-time
- Department: Information Security
- Job Country: United States of America
Company Description
Our Mission
At Palo Alto Networks® everything starts and ends with our mission:
Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
Who We Are
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
Job Description
Your Career
The Managed XSIAM Service Tech Lead acts as the technical focal point for Managed XSIAM customers, driving onboarding, adoption, and ongoing success. You’ll combine deep product expertise with a consultative approach to guide customers through their security journey—translating their goals into measurable outcomes and ensuring fast, meaningful ROI from their Managed XSIAM investment.
You will collaborate closely with our SOC engineering, threat hunting, and product teams to tailor the service to each customer’s environment, ensuring seamless delivery and exceptional customer experience.
Your Impact
Value Delivery
Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers
Collect and analyze customer security data to identify improvement opportunities in detection coverage, alert quality, tenant hygiene, and potential automation use cases
Advise customers on best practices for alert tuning, data onboarding, and correlation optimization
Drive continuous improvement in customer security posture and measurable time-to-value outcomes
Operational Excellence
Manage incoming customer requests, prioritize effectively, and collaborate with the SOC engineering team to ensure timely, high-quality delivery
Lead customer touchpoints, including onboarding sessions, security reviews, and proactive engagement meetings
Translate complex detection and response concepts into actionable guidance for diverse audiences
Collaboration & Enablement
Partner with Unit 42’s SOC engineering, Product, and MDR teams to ensure consistent service quality and cross-functional alignment
Collaborate with the SOC engineering team to design and implement automation workflows that enhance detection, response, and reporting efficiency
Champion customer needs internally, advocating for enhancements and escalations where needed
Contribute to documentation, best practices, and scalable frameworks for the Managed XSIAM service
Qualifications
Your Experience
5+ years of professional experience in Customer Success, Technical Account Management, Security Consulting, Solutions Architecture, or SOC operations (preferably within enterprise cybersecurity or SaaS environments)
Strong understanding of XDR, SIEM, and SOAR technologies, including incident and alert management, correlation development, and data source onboarding
Demonstrated experience collaborating with security analysts, engineers, and threat hunters in operational environments
Excellent communication skills—able to explain complex security concepts clearly to both technical and non-technical audiences
Analytical mindset with strong problem-solving abilities and sound judgment in prioritizing tasks and managing complex customer needs
Deep curiosity and a growth mindset—comfortable learning and adapting to evolving technologies and detection methodologies
Bachelor’s degree in Computer Science, Information Security, or a related field
Additional Information
The Team
As part of the Unit 42 Managed XSIAM organization, the team helps customers operationalize and optimize their Managed XSIAM deployments—delivering proactive, white-glove guidance that enhances their detection, investigation, and response capabilities.
Our mission is to help customers maximize the value of Cortex XSIAM while continuously improving their overall security posture and SOC maturity.
Compensation Disclosure
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $127,600 - $206,500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
Our Commitment
We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected].
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.