Sr Manager Product Security

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

We have the vision of a world where each day is safer and more secure than the one before. These aren’t easy goals to accomplish – but we’re not here for easy. We’re here for better. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

We’re changing the nature of work. Palo Alto Networks is evolving to meet the needs of our employees now and in the future through FLEXWORK, our approach to how we work. From benefits to learning, location to leadership, we’ve rethought and recreated every aspect of the employee experience at Palo Alto Networks.  And because it FLEXes around each individual employee based on their individual choices, employees are empowered to push boundaries and help us all evolve, together. 

Job Description

Your Career 

We hold the ground on the most challenging attack surfaces, block kill chains, and protect our customers globally.

Developing industry-leading security tools is tough, and ensuring they are built securely is just as tough, especially when operating at scale. It takes a lot of effort, coordination, and often custom tooling on top of the already industry-leading tools that are used to secure some of the largest companies in the world.

With this position, you will be leading the team for the company's Product Security Appsec and Secure CI/CD teams for the Information Security (InfoSec) team itself. The Product Security Team is looking for driven individuals who know how to collaborate within our team, and with all of the other amazing teams in Palo Alto Networks. As the manager you will work closely with other leaders to coordinate priorities and efforts between requests from other teams, needs for the Product Security Appsec and Secure CI/CD teams, and general improvements for all InfoSec teams.

Your Impact

• Take ownership of the Appsec and Secure CI/CD offering to product development teams
• Work with product development teams to provide accurate, actionable security insights and results
• Lead and Build next gen Appsec technologies with automation into complex engineering CI/CD pipelines
• Lead and Build risk driven intelligent automation to optimize SAST, SCA, CVA, and DAST integrations with advanced tooling integration
• Evangelize and lead the adoption of Secure SDLC and security best practices across the entire SDLC - You’re someone that possesses strong knowledge of security from code to cloud and wants to help people apply it
• Products/Tools Design & Development
  • Lead and implement consumable software and services for internal and external customers -Ensure on-schedule delivery of a high-quality product that meets technical requirements 
  • Build vs. Buy Research and Evaluation
  • Take ownership and/or lead the engineering responsibility for multiple components in a project
  • Lead and Implement programs to automate complex data analysis for high priority security missions
• Solve Unique Problems!
  • Design solutions for real Information Security problems that are only seen at our scale
  • Empower Security Experts and foster innovation across the organization
• Influence Product Development!
• Provide real feedback to product teams to identify feature gaps and influence the development of Palo Alto’s products themselves

Qualifications

Your Experience

• BS/MS in Computer Science, or other engineering/technical degree or equivalent military experience required
• 8+ years of experience in leading appsec or security engineering roles at large organizations or innovative startups
• Strong domain expertise in Application Security, SAST, SCA. DAST and CVA, cloud technologies, web frontend, backend, JS
• Experience with application security, penetration testing, and/or security benchmarking
• Comfortability with Cloud-based datastore technologies (AWS RDS, GCP SQL, Athena, BigQuery)
• Knowledge of software and cloud security lifecycle deployment and security automation frameworks in GCP, AWS and/or Azure
• Demonstrated track record of success
• Effective written and oral communication with multiple levels of leadership involving both the business and technical sides of the business

Additional Information

The Team

Think about it, security for an information security company. Working at a high-tech cybersecurity company within the Information Security team is a once in a lifetime opportunity. You’l