{"id":4191191,"url":"https://alion.io/job/ahead-senior-technical-consultant-network-secops","title":"Senior Technical Consultant - Network SecOps","company":{"id":3614,"name":"AHEAD","domain":"ahead.com","url":"https://alion.io/company/ahead","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":74,"open_postings":36,"ghost_share":0,"stale_share":0.806,"repost_share":0.028,"time_to_fill_p50_days":78,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":180000,"max":210000,"currency":"USD","period":"year","gross":null,"usd_annual":210000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GCP","optional":false},{"name":"Google SecOps","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Tines","optional":false},{"name":"Windows","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-11-12T16:58:33Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T19:23:02Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Senior Technical Consultant is a cybersecurity professional with deep expertise across SIEM and SOAR platforms who supports Enterprise Clients. Responsible for the technical execution of the Palo Alto Cortex platform (XSIAM, XSOAR), the CrowdStrike Falcon platform (Next-Gen SIEM, Falcon Fusion SOAR), and Google SecOps deployments with complex configurations and mentoring junior team members. As a Senior Technical Consultant, you will be a key player in implementing deployments from log source onboarding through detection tuning, build the correlation rules and integrations that turn raw telemetry into decisions, and serve as the technical advisor too.\nResponsibilities:\nDesign and deploy SIEM architectures across on-premises, virtual, and cloud environments, including data ingestion strategy for log forwarders, syslog collectors, and cloud-native telemetry in AWS, Azure, and GCP\nConfigure and design data pipelines and storage tiers for retention, query performance, and compliance requirements, including sizing decisions for high-volume log environments\nCreate custom correlation rules and detection content (Cortex XSIAM BIOC/correlation rules, CrowdStrike NG-SIEM correlation rules, Google SecOps YARA-L rules) tailored to client environments, moving beyond out-of-box use cases to address specific threats and false-positive patterns\nDevelop custom dashboards and SOAR playbooks using metrics, entities, and application views, translating raw log data into views that map to client SOC workflows and executive reporting needs\nBuild and maintain REST API integrations between SIEM/SOAR and EDR (including CrowdStrike Falcon and Cortex XDR), firewall, ticketing, and CMDB platforms, including custom automation scripts and data enrichment configurations\nConduct security monitoring assessments for prospective and existing clients, identifying blind spots in log coverage, detection gaps, and alert fatigue drivers\nCollaborate with clients to optimize and fine tune their deployment and provide guidance to assist with the optimization of the platform\nAct as a technical resource for troubleshooting and resolving complex SIEM/SOAR related issues during and post-implementation\nContribute to project documentation, ensuring clarity and completeness of Solution Designs and As-Built configurations\nMentor junior consultants, sharing your SIEM/SOAR knowledge and fostering their technical development\n\nQualifications:\n8+ years of hands-on experience with a major SIEM platform (Cortex XSIAM, CrowdStrike Next-Gen SIEM, Google SecOps, Splunk, Microsoft Sentinel, IBM QRadar, Elastic Security) in production environments\nExperience deploying and administering at least one SOAR platform (Cortex XSOAR, Google SecOps SOAR, CrowdStrike Falcon Fusion, Splunk SOAR, Microsoft Sentinel Automation, Swimlane, Tines)\nDemonstrated experience deploying and tuning log ingestion pipelines, indexers, and storage tiers, including sizing, retention configuration, and performance troubleshooting\nStrong grasp of log and telemetry analysis: network, endpoint, identity, and cloud audit data sources\nExperience building custom correlation rules, detections, and dashboards beyond default configurations\nProficient in Python and PowerShell scripting for automation, customization, and playbook development\nWorking knowledge of query languages (XQL, LogScale/CQL, YARA-L, SPL, KQL, or equivalent) and experience integrating diverse data sources into a SIEM\nExperienced in proactive threat hunting and incident investigations using the MITRE ATT&CK framework, Cyber Kill Chain, NIST Cybersecurity Framework (CSF), and CIS Critical Security Controls to identify adversary TTPs and strengthen detection and response capabilities\nExperience with cloud-native logging (AWS CloudTrail, Azure Monitor, GCP Audit Logs) is a strong plus\nSolid understanding of network security, cloud environments, Identity, Linux, Mac, and Windows\nStrong analytical and troubleshooting capabilities\nEffective communication skills with the ability to engage with clients and Team members\nRelevant certifications (CEH, PenTest+, Security+, CISSP, Microsoft SC-200) preferred or equivalent industry certifications are a plus","description_format":"text","description_chars":4195,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Managed IT Services (MSP)","AI Consulting & Integration","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-12T19:23:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 23 · green card filings: 4","filings_12m":23,"filings_prev_12m":21,"green_card_filings_12m":4,"median_offered_wage_usd":151759,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":78,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-12T20:36:06Z"},"pay":{"stated_usd_annual":210000,"is_top_pay":true},"html_url":"https://alion.io/job/ahead-senior-technical-consultant-network-secops","json_url":"https://alion.io/job/ahead-senior-technical-consultant-network-secops.json","meta":{"generated_at":"2026-11-12T20:36:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43509,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3614},"rest":"https://alion.io/mcp/rest/get_company?id=3614"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fahead-senior-technical-consultant-network-secops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fahead-senior-technical-consultant-network-secops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fahead-senior-technical-consultant-network-secops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ahead-senior-technical-consultant-network-secops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fahead-senior-technical-consultant-network-secops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4191191}},{"tool":"search_jobs","arguments":{"company":"ahead.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4191191},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}