• Bachelor’s degree in IT/Engineering (or equivalent experience).
• 3–5+ years of experience delivering and/or supporting security solutions, ideally in SOC/SecOps environments (SIEM/SOAR/EDR/XDR).
• Strong networking and security fundamentals: TCP/IP, routing/switching, firewalling, TLS, DNS, log management.
• Experience integrating security platforms via APIs and standard mechanisms (syslog, webhooks, SSO/SAML), and familiarity with SOC processes (triage, investigation, containment, remediation).
• Excellent communication, presentation, and documentation skills; customer/partner-oriented mindset.
• Palo Alto Networks certifications: PCNSA/PCNSE; Cortex-related credentials (XDR/XSOAR/XSIAM) are a strong plus.
• Automation/scripting skills (e.g., Python), regex, and familiarity with detection concepts and frameworks (e.g., MITRE ATT&CK) – advantage.
• Experience integrating with ITSM/ticketing systems and/or third-party SIEM ecosystems.
• Prior experience delivering instructor-led trainings and facilitating technical workshops.

• Lead technical discovery and presales qualification with partners and/or end customers to map SecOps use cases (TDIR, SOC automation, incident response, threat hunting, exposure/attack surface management).
• Design and propose solution architectures (presales/project-level HLD/LLD) for Cortex XSIAM/XDR/XSOAR/Xpanse, including integration patterns and data onboarding.
• Produce technical sizing and Bills of Materials (BOMs); contribute to technical sections of proposals, RFI/RFP responses and Statements of Work.
• Plan and deliver technical presentations, workshops, and demonstrations; define POC/POV success criteria and document outcomes.
• Implement and integrate SecOps solutions in delivery projects: data source onboarding, third-party integrations, incident/case workflows, and automation/playbooks (XSOAR/XSIAM), according to agreed scope.
• Provide best-effort post-sales technical assistance and ensure structured handover to delivery/managed services teams (documentation, assumptions, risks, runbooks, next steps).
• Deliver Palo Alto Networks authorized trainings and/or tailored enablement sessions; contribute to training materials and lab/demo readiness.
• Maintain technical leadership through continuous learning, hands-on labs, certifications, and tracking Cortex roadmap updates; share best practices within the team.
• Typical Deliverables:
  • Solution Architecture & Design documentation (HLD/LLD) for Cortex SecOps deployments.
  • BOM + sizing + assumptions/constraints and presales effort estimates.
  • POC/POV plan (scope, success criteria, test plan) and results report.
  • Integration design (data sources, collectors/brokers, API connections, incident/case flows).
  • Operational runbooks: onboarding, tuning, incident response workflows, escalation procedures.
  • Training materials (agenda, labs/handouts) and knowledge transfer sessions.

Alef Distribution RO este parte din grupul ALEF NULA, cu o experienta de peste 30 de ani in domeniul tehnologiei informatiei si unul dintre cei mai puternici distribuitori din Europa de Est.