Cortex SecOps Domain Consultant

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting‑edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values:
Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

A Cortex Domain Consultant is a subject matter expert for the Cortex portfolio. Their primary function is to provide deep, product‑specific technical expertise for qualified sales opportunities. They play a pivotal role in defining technical solutions that secure a customer’s critical business imperatives and evangelize our industry‑leading Sec Ops solutions.

The DC role is aligned to a specific domain—in this case, Cortex—and operates in a flexible capacity, being brought into opportunities based on technical needs.

Cortex Domain Consultants are responsible for a range of activities focused on securing the technical win for their specific product area.

• Advanced Discovery and
  
  Qualification:
  
  Leading in‑depth discovery sessions to identify client needs.
• Solutioning and Architecture: Architecting solutions to help customers improve their security posture, detect threats, and remediate issues.
• Product‑specific Pitch & Demo: Delivering advanced, product‑focused pitches and demonstrations that showcase the unique value proposition.
• Running Proof of Value (POV): Scoping and leading POV projects for prospective customers to ensure a technical win.
• Securing the Technical Win: Holding responsibility for achieving the technical win for their specific product.
• Scoping & Bill of Materials (BOM) Validation: Reviewing and validating the BOM to ensure all components are accurate.
• Handoff to Post‑Sales (GCS): Ensuring a smooth transition from the pre‑sales to post‑sales teams.
• RFI/RFP Support: Assisting with responses to RFIs and RFPs, serving as the main technical point of contact for the Cortex portfolio.

The way a DC engages depends on the customer segment.

• For large accounts (e.g., Strategic, Majors, Enterprise): The Solutions Consultant (SC) leads the account‑based pursuits and partners with the DC for deep, product‑specific expertise on qualified opportunities. The SC is accountable for the full customer lifecycle, while the DC is brought in for their specialized knowledge.
• For smaller accounts (e.g., Commercial, Regional): The Account Executive (AE) owns the business and technical relationship. The DC partners directly with the AE to provide technical expertise and guidance on qualified opportunities. In this "opportunity‑centric" model, the DC has technical accountability and responsibility on the opportunity.

As subject matter experts, Cortex DCs are expected to have deep technical knowledge in the Sec Ops domain.

• Sec Ops (Required)
• SIEM (Security Information and Event Management)
• Incident Response and EDR/XDR
• Threat Management
• SOAR (Security Orchestration, Automation, and Response)

In addition to technical skills, all DCs are expected to be proficient in foundational areas such as building trust, demonstrating awareness of customer challenges, and showing…