Career Path and Certification Advice for SOC and Palo Alto Engineers

The author graduated in early 2025 and has been working in a SOC role while also handling Palo Alto engineering tasks. They hold SAL1 and PSE Cortex Professional certifications and are preparing for Cortex XSIAM. They seek advice on progressing in both SOC and engineering roles, the feasibility of remote or part-time work, and the next logical certification.

In cybersecurity, combining SOC and engineering roles is feasible but may require specialization as one progresses. SOC roles focus on monitoring and incident response, while engineering roles involve designing and maintaining security infrastructure. Hybrid roles are more common in smaller organizations, but larger enterprises typically separate these functions.

Remote work in cybersecurity is increasingly common, especially for SOC analysts and security engineers who can perform their duties remotely. Part-time roles are less common but can be found in consulting or contract positions. Building a strong professional network can help in securing such opportunities.

For certifications, given their background in Palo Alto and SOC, the next logical steps could include higher-level Palo Alto certifications like PSE: Endpoint Professional or PSE: Strata Professional. Additionally, certifications in cloud security (e.g., CCSP, AWS/Azure security certifications) or broader security management (e.g., CISSP) could be beneficial.

In summary, the author should consider specializing in either SOC or engineering, pursue relevant certifications, and explore remote work opportunities while building a strong professional network.