Principal Engineer Software (Cortex Xpanse VMS)

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work full time from our office with flexibility offered where needed. This setup fosters casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where we all win with precision.

Job Description

Your Career

The Cortex Vulnerability Management Scanning team is expanding, and we’re looking for a Principal Software Engineer (Full Stack) to join our team. This team builds the software that provides our customers visibility into their behind-the-firewall attack surface, allowing them to prioritize and remediate critical vulnerabilities using the XSIAM platform.

Your Impact

• Design, build, and maintain the end to end experience for running our network vulnerability scanner - This includes building both the software that runs within customers’ networks and the user experience for interacting with that software from within the XSIAM platform
• Research and utilize leading open source network scanning solutions
• Analyze existing solutions, identify barriers to scaling, recommend changes, then implement
• Take part in architecture strategy sessions - design solutions that accommodate the requirements of the various groups across Cortex
• Collaborate with teams to solve problems, reduce technical debt, and evolve development practices
• Drive technical best practices and evangelize new technologies within the engineering org
• Collaborate with other engineers and ensure that your team delivers high-quality output
• Take ownership of projects, drive them to completion, and support them in production

Qualifications

Your Experience 

• 5+ years of experience as a professional software engineer writing full stack software
• Experienced and opinionated about API design and distributed backend systems
• Able to switch between research, design, prototype, and implementation
• Experience using cloud managed services (ideally in GCP)
• Proficient in Python and one of Rust, Golang, or C
• Working knowledge of at least one of the major cloud platforms (eg GCP, AWS, or Azure)

Nice to have:

• Experience with Angular
• Cybersecurity knowledge demonstrated with base level certifications (eg OSCP, GPEN, or Pentest+) or willingness to obtain
• Knowledge of cybersecurity frameworks and vulnerability methodologies
• Familiarity with current penetration and security assessment tools such as Metasploit, Nmap, Burp Suite, Wireshark, etc.
• Experience contributing to open source software
• Proficient knowledge of common networking protocols such as HTTP, DNS, DHCP, ARP, FTP, etc - Basic knowledge in other less common protocols such as ICS/SCADA or database protocols
• Familiarity with common open source security software such as Nuclei, OpenVAS, and Nmap
• Proficient knowledge in network architectures - understands subnetting and routing and how VLANs work and affect network scanning
• Proficiency in Linux and Windows operating systems
• Demonstrates a basic understanding of how a variety of exploits work and shows skills in enumerating and selecting the c