Principal Offensive Security Engineer

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Our Approach to Work

We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond!

At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together!

Job Description

Your Career 

Palo Alto Networks is seeking a highly skilled and experienced Offensive Security Engineer to contribute to the Attacker Disruption service within the Information Security team at Palo Alto Networks. You will play a pivotal role in providing strategic direction and designing innovative security solutions to disrupt cyber threats targeting Palo Alto Networks. Being embedded into the internal Security Operations Center (SOC), this position provides a unique opportunity to influence all technical and non-technical information security controls within Palo Alto Networks. This insight allows you to identify and address the most impactful challenges, contributing to the continuous improvement of our security posture company-wide.

While part of the Security Operations Team, it's important to note that this role is not responsible for handling day-to-day alerts, and will not be part of the on-call rotation. This role is not part of the primary Offensive Security team that performs regularly scheduled penetration testing and red team operations.

Your Impact

• Provide strategic direction and leadership in the design of advanced security solutions to disrupt sophisticated cyber threats against Palo Alto Networks
• Act as a subject matter expert in all technical Information Security initiatives, especially those originating from the SOC, such as threat hunting, detection engineering, and purple teaming
• Envision, architect, and design groundbreaking security projects - As the driving force behind these initiatives, you will not only build robust solutions but also actively create an environment that fosters innovation and ensures the successful completion of each project, contributing to the continuous evolution of Palo Alto Networks' cybersecurity capabilities
• Provide guidance and expertise to cross-functional teams, including senior architects and principal engineers, fostering a culture of knowledge sharing and skill development in order to assess security risks and develop strategies to effectively disrupt attackers
• Stay informed about the latest security trends, vulnerabilities, and technologies to ensure proactive defense measures and share insights company-wide
• Employ creative techniques to discover vulnerabilities, and implement innovative security solutions that challenge attacker assumptions, dramatically increasing their cost to attack
• Work closely with product development teams to integrate security features into our products, ensuring security is embedded in the entire development lifecycle
• Participate in incident response activities and contribute to the continuous improvement of our security posture across the company
• Forge and maintain alliances in and out of InfoSec

Qualifications

Your Experience 

• Minimum 7+ years of impactful, technically demanding InfoSec work, including 3+ years as the lead for complex, full-scope red team assessments
• Proven record of identifying unique gaps and designing and implementing projects that address them in an automated, easy-to-maintain fashion
• Broad and deep technical knowledge typically associated with the “A-Team” of a fast-paced, boutique security consultancy
• Excellent analytical and problem solving skills with attention to detail
• Resilience necessary to uncover true root causes, regardless of the nature and dep