The English-language job board for Spain
89,000+ live jobsPalo Alto Administrator (Cortex XSIAM and XDR)
Hybrid in Madrid·Full-time·Added yesterday (last checked 3 Nov)
Our summary
- Work mode
- Hybrid, Madrid
- Contract
- Full-time
- English
- Required



Visa options
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Skills
This job advert was originally written in Spanish.
Requirements
Languages
English B2
The role
From our Cyber Trust project unit, we are looking for a Senior Palo Alto Cortex XSIAM and EDR (Cortex XDR) level 2-3 administrator to join one of our projects.
What you'll do
Analyze and respond to security incidents in Palo Alto (Cortex XSIAM and XDR) with L2 and L3 functions: in-depth investigation, containment, eradication, endpoint forensic analysis, and preparation of post-incident reports.
Exploit the native capabilities of XSIAM (analytics, AI, playbooks, agents) and administer the licensed modules: ITDR, Exposure Management, ASM/XTI, Cloud Runtime Security, Cloud Posture, AppSec, and Endpoint Protection.
Configure agent profiles, installation packages, and uninstallation tokens; manage agent versions and deployments.
Define and maintain security policies, manage alert exceptions on demand, and execute scans on demand or triggered by playbook or incident.
Upload IOCs and create custom rules (BIOCs); configure and schedule hunting queries in XQL.
Continuously review and improve existing Data Models and data source integrations.
Configure and maintain integrations (APIs, connectors, MCP) between XSIAM and the client's AI, and manage API Keys.
Manage the XSIAM / Cortex Cloud integration.
Analyze and optimize Compute Units consumption.
Provide support for platform incidents (8x5, with 24x7 on-call shifts) and manage the relationship with the manufacturer's support.
Evaluate new Palo Alto Networks capabilities, prepare the adoption proposal, pilot in shadow mode, and execute the implementation.
How you'll work
Hybrid modality with occasional attendance at offices (Madrid).
8x5 schedule with availability for 24x7 on-call shifts
About DEVOTEAM
Devoteam is a global IT consulting and digital transformation company headquartered in Levallois-Perret, France. With over 10,000 employees across more than 20 countries, Devoteam helps organizations leverage technology, particularly cloud platforms like Google Cloud, AWS, and Azure, to drive innovation and business growth. The company operates in multiple sectors, offering services in cloud engineering, cybersecurity, data analytics, and identity management.
In Spain, Devoteam has a significant presence with offices in Madrid and Barcelona, and many roles are offered with remote or hybrid work options. The company is known for its strong partnerships with major cloud providers and its focus on digital transformation. For international professionals, Devoteam offers opportunities to work on cutting-edge projects in a multicultural environment, with many positions requiring English proficiency and offering the possibility of fully remote work.
- Founded
- 1995
- Employees
- 10,000–15,000
- Headquarters
- Levallois-Perret, France
- In Spain
- Madrid, Barcelona
Good to know if you are moving
- Devoteam has offices in Madrid and Barcelona, with many roles offering 100% remote work across Spain.
- The company is a Google Cloud Premier Partner, offering opportunities to work on cutting-edge cloud projects.
- Many positions require English proficiency, making it accessible for international professionals.
- Devoteam provides a multicultural work environment with employees from various countries.
- The company offers career development programs and certifications in cloud and cybersecurity.
In their own words
About the company & team
Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology.
Technology is in our DNA, and we believe in it as a lever capable of driving change for the better, maintaining a balance that allows us to offer our client portfolio top-tier technological tools, but always with the closeness and professionalism of a team that acts as a guide along the way.
Devoteam has been committed to technology serving people for over 30 years. With more than 10,000 people in the group, across 20 countries in Europe, the Middle East, and Africa.
More jobs like this
or browse Madrid·Security·Security·Mid-level·Hybrid·Cybersecurity·Community of Madrid

