Technical Service Delivery Lead (XSIAM)

The Team

As part of the Unit 42 Managed XSIAM organization, the team helps customers operationalize and optimize their Managed XSIAM deployments—delivering proactive, white-glove guidance that enhances their detection, investigation, and response capabilities.

Our mission is to help customers maximize the value of Cortex XSIAM while continuously improving their overall security posture and SOC maturity.

Job Summary

The Technical Service Delivery Lead (XSIAM) acts as the technical focal point for Managed XSIAM customers, driving onboarding, adoption, and ongoing success. You’ll combine deep product expertise with a consultative approach to guide customers through their security journey—translating their goals into measurable outcomes and ensuring fast, meaningful ROI from their Managed XSIAM investment.

You will collaborate closely with our SOC engineering, threat hunting, and product teams to tailor the service to each customer’s environment, ensuring seamless delivery and exceptional customer experience.

Key Responsibilities

• Value Delivery: Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers
• Collect and analyze customer security data to identify improvement opportunities in detection coverage, alert quality, tenant hygiene, and potential automation use cases
• Advise customers on best practices for alert tuning, data onboarding, and correlation optimization
• Drive continuous improvement in customer security posture and measurable time-to-value outcomes
• Operational Excellence: Manage incoming customer requests, prioritize effectively, and collaborate with the SOC engineering team to ensure timely, high-quality delivery
• Lead customer touchpoints, including onboarding sessions, security reviews, and proactive engagement meetings
• Translate complex detection and response concepts into actionable guidance for diverse audiences
• Collaboration & Enablement: Partner with Unit 42’s SOC engineering, Product, and MDR teams to ensure consistent service quality and cross-functional alignment
• Collaborate with the SOC engineering team to design and implement automation workflows that enhance detection, response, and reporting efficiency
• Champion customer needs internally, advocating for enhancements and escalations where needed
• Contribute to documentation, best practices, and scalable frameworks for the Managed XSIAM service

Preferred Qualifications

• 5+ years of professional experience in Customer Success, Technical Account Management, Security Consulting, Solutions Architecture, or SOC operations (preferably within enterprise cybersecurity or SaaS environments)
• Strong understanding of XDR, SIEM, and SOAR technologies, including incident and alert management, correlation development, and data source onboarding
• Demonstrated experience collaborating with security analysts, engineers, and threat hunters in operational environments
• Excellent communication skills—able to explain complex security concepts clearly to both technical and non-technical audiences
• Analytical mindset with strong problem-solving abilities and sound judgment in prioritizing tasks and managing complex customer needs
• Deep curiosity and a growth mindset—comfortable learning and adapting to evolving technologies and detection methodologies
• Bachelor’s degree in Computer Science, Information Security, or a related field or equivalent military experience

Salary Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $127600/YR - $206500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.