XSIAM Endpoint Engineer

Our Mission

At Palo Alto Networks were united by a shared missionto protect our digital way of life. We thrive at the intersection of innovation and impact solving real-world problems with cutting-edge technology and bold thinking. Here everyone has a voice and every idea counts. If youre ready to do the most meaningful work of your career alongside people who are just as passionate as you are youre in the right place.

Who We Are

In order to be the cybersecurity partner of choice we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption Collaboration Execution Integrity and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest we invite you to join us!

Job Summary

The Cortex XSIAM Endpoint Engineer is a specialized technical role within the Professional Services team. This individual will be a key player in the successful deployment and operationalization of Palo Alto Networks Cortex XSIAM platform with a specific focus on the endpoint security components. The role centers on migrating customers from existing Cortex XDR or third-party EDR solutions to XSIAM managing agent deployment and tuning endpoint security policies to help customers maximize the value of our AI-driven SOC platform.

This position requires a deep understanding of endpoint security (EDR/XDR) agent lifecycle management and security policy configuration combined with hands-on expertise in the Cortex XSIAM platform.

Your Impact

• Endpoint Migration & Deployment:
  

  • Lead and execute the migration of endpoint agents from Cortex XDR or legacy EDR platforms to Cortex XSIAM.

  • Develop and implement a phased agent rollout plan to ensure a smooth transition with minimal disruption.

  • Create migration plans for moving agents and assist in updating the customers architecture diagrams to reflect the new XSIAM endpoint traffic flow.

  • Perform agent compatibility checks against various endpoint OS versions and conduct pilot validations before mass rollouts.

• Policy and Configuration Management:
  

  • Analyze the customers existing XDR policies profiles and configurations to plan a successful migration to Cortex XSIAM.

  • Implement and fine-tune endpoint security policies profiles and exception rules within the XSIAM console to align with customer security objectives.

  • Manage global allow/block lists exceptions and other endpoint-specific configurations post-migration.

  • Recreate and apply configurations such as tags and exception profiles for different operating systems (e.g. Windows Linux macOS) in the unified XSIAM tenant.

• Endpoint Health and Operationalization:
  

  • Ensure endpoint agents are healthy and managed centrally post-migration.

  • Collaborate with the customers SOC and endpoint teams to tune alerts validate security posture and reduce alert fatigue.

  • Provide expert guidance on endpoint security best practices including threat prevention device control and data loss prevention (DLP).

• Customer Enablement and Project Success:
  

  • Act as the key technical endpoint resource within the project team working alongside the XSIAM Lead Consultant SIEM Engineer and Project Manager.

  • Contribute to key project documents including the Solution Design and As-Built documents with a focus on endpoint architecture and configuration.

  • Participate in testing and pre-production activities to ensure a smooth go-live for all endpoint-related functions.

  • Assist in transitioning the customer to Business-As-Usual (BAU) operations and handing over to the appropriate long-term support teams.

Qualifications

Your Experience

• Technical Skills:
  

  • Proven experience with endpoint security solutions (EDR/XDR) specifically with agent deployment policy management and troubleshooting.

  • Hands-on experience with Cortex XDR is highly desirable.

  • Direct experience with Cortex XSIAM particularly in agent migration from XDR to XSIAM is a strong plus.

  • Strong understanding of endpoint operating systems (Windows Linux macOS) and their security configurations.

  • Familiarity with SOC operations and how endpoint data is used for threat hunting investigation and response.

  • Knowledge of scripting for agent deployment and management is an asset.

• Professional Attributes:
  

  • Experience in a customer-facing consultative role such as professional services technical account management or solutions architecture.

  • Strong analytical and problem-solving skills to navigate complex agent migration and policy-tuning challenges.

  • Excellent communication skills with the ability to manage stakeholder expectations and collaborate effectively with customer endpoint teams.

  • Ability to work effectively as part of a distributed project team to drive successful customer outcomes.

Our Commitment

Were trailblazers that dream big take risks and challenge cybersecuritys status quo. Its simple: we cant accomplish our mission without diverse teams innovating together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need please contact us at .

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace and all qualified applicants will receive consideration for employment without regard to age ancestry color family or medical care leave gender identity or expression genetic information marital status medical condition national origin physical or mental disability political affiliation protected veteran status race religion sex (including pregnancy) sexual orientation or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.