Cloud & Security DevSecOps Engineer (Cortex)

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Job Description

Your Career

We are looking for a highly technical Cloud Security DevSecOps Engineer with a profound understanding of cloud workloads, cloud-based applications, and cloud security to join the Threat and Detection team in our Tel-Aviv R&D center.

This role requires exceptional problem-solving, data analysis skills, and an aptitude for learning and developing high-quality software to drive our Cloud Security & Automation efforts across the company.

you will Develop & Analyze Security, Protection Capabilities, Sand security Automation Scenarios and build the needed infrastructure and tools to stabilize and enrich our Cloud security Infrastructure Threat environment.

Your Impact 

As a Cloud & Security DevSecOps Engineer, your primary role will be to Develop and assess the security of our cloud , Agentless protection and detection capabilities. identify problems within our cloud security products and report them to our development teams and collaborate with the different research teams to identify security issues. You will collaborate with various teams to ensure comprehensive coverage of the latest cloud issues and vulnerabilities, thus ensuring the security of our cloud and Agentless workloads.

• Create, develop, and implement automation and system integration for various security models. 
• Act as a bridge between development & operations teams to ensure the product provides the best security value practices integrated into all development lifecycle phases.
• Work closely and in full coordination with multiple product engineering groups to produce highly secure features.
• Handle, prioritize, and effectively bring security vulnerabilities to resolution for multiple products.
• Build out security processes and perform threat modeling for all ongoing development and operations.
• Create and publish a platform for testing and evaluation of different security products. 

Qualifications

Your Experience:

• Extensive Experience: At least 5 years of overall experience in the field of IT, with at least 3 years specializing in DevSecOps / Research / Cloud Automation roles. Your time in this role should have provided you with a deep understanding of the DevSecOps lifecycle, tools, and best practices.
• Security Engineering Expertise: Minimum of 3 years of professional experience with security engineering roles
• At least 2 years of coding experience, preferably in Python or Go, but proficiency in other languages such as Ruby, C/C++, Java, or .NET is also acceptable. 
• Proven experience with threat /Detection analysis techniques is required, including threat modeling, design review, and threat hunting.
• Foundational security engineering experience in cloud environments such as AWS, GCP, or Azure is essential. This should ideally include hands-on experience with container and Kubernetes-based infrastructure. 
• Knowledge of Prisma Cloud, XIEM, SOC, Nessus, and similar services- advantage .
• An understanding of and ability to implement security best practices and tools is crucial. You should be adept at using security-focused tools and have a deep understanding of container-based orchestration tools like Kubernetes, OpenShift, Docker, etc.
• Familiarity with API Security, Container Security, and AWS / Azure / GCP Cloud Security.
• Effective problem-solving skills, independent.
• Strong communication and interpersonal skills, with the ability to work and coordinate between multiple teams.

Additional Information

The Team

Our team is dedicated to performing and Validate PANW Cortex Security Features on multiple Operating systems including but not limited to Windows, Linux, Mac, and Cloud Workloads, simulating known threats and offensive tools to determine New features security Coverage & Detection quality across the Kill Chain /MITRE ATT&CK Framework including known and unknown threats.

#LI-NS14

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.