Principal Consultant – SOC Transformation and XSIAM Deployment

Role overview Lead large-scale security operations transformations, helping enterprise customers modernize how they detect, investigate, and respond to threats using an integrated analytics platform. You will advise senior security leaders and direct engagements from initial strategy through operational rollout, with a focus on reliable data ingestion, effective detections, and measurable improvements to security operations.

Responsibilities - Advise customers on SOC modernization strategy and serve as a technical subject matter expert. - Lead multinational transformation programs that unify fragmented detection and response workflows. - Direct enterprise deployments from planning through operationalization. - Design log ingestion strategies and improve the quality and usefulness of platform data. - Architect and tune detection logic and correlation rules to strengthen threat coverage and system performance. - Identify opportunities to automate alert handling and response, and mentor professional services teams.

Requirements - A track record modernizing SOCs through automation and advanced detection, with measurable improvements to detection and response times. - At least 10 years deploying and integrating SIEM or security analytics solutions in large enterprises. - At least 8 years working with SOC tools, processes, and workflows. - Hands-on expertise across SIEM, SOAR, endpoint detection and response, cloud security, and threat intelligence. - Ability to design and develop effective detection and correlation rules. - Strong executive communication and trusted-advisor skills, from analyst-level discussions through CISO engagement. - Ability to travel up to 30%.

Nice to have - Industry certifications such as CISSP or GIAC. - Familiarity with SIEM products such as Splunk or IBM QRadar.