Palo Alto Administrator (Cortex XSIAM and XDR)
About the company
Devoteam is a leading European consultancy focused on digital strategy, technological platforms, cybersecurity, and business transformation through technology.
Technology is in our DNA and we believe in it as a lever capable of driving change for the better, maintaining a balance that allows us to offer our client portfolio top-tier technological tools, but always with the closeness and professionalism of a team that acts as a guide along the way.
Devoteam has been committed to technology at the service of people for over 30 years. With more than 10,000 people in the group, in 20 countries across Europe, the Middle East, and Africa.
Your tasks
From our Cyber Trust project unit, we are looking for a Senior Palo Alto Cortex XSIAM and EDR (Cortex XDR) Administrator level 2-3 to join one of our projects.
- Analyze and respond to security incidents in Palo Alto (Cortex XSIAM and XDR) with L2 and L3 functions: in-depth investigation, containment, eradication, endpoint forensic analysis, and post-incident report preparation.
- Exploit the native capabilities of XSIAM (analytics, AI, playbooks, agents) and manage the licensed modules: ITDR, Exposure Management, ASM/XTI, Cloud Runtime Security, Cloud Posture, AppSec, and Endpoint Protection.
- Configure agent profiles, installation packages, and uninstallation tokens; manage agent versions and deployments.
- Define and maintain security policies, manage on-demand alert exceptions, and execute on-demand scans or those triggered by playbook or incident.
- Upload IOCs and create custom rules (BIOCs); configure and schedule hunting queries in XQL.
- Continuously review and improve existing Data Models and data source integrations.
- Configure and maintain integrations (APIs, connectors, MCP) between XSIAM and the client's AI, and manage API Keys.
- Manage the XSIAM / Cortex Cloud integration.
- Analyze and optimize Compute Units consumption.
- Provide support for platform incidents (8x5, with 24x7 on-call shifts) and manage the relationship with the manufacturer's support.
- Evaluate new Palo Alto Networks capabilities, develop the adoption proposal, pilot in shadow mode, and execute the implementation.
Requirements
Additional Information English B2
Other
Hybrid modality with occasional attendance at offices (Madrid).