Staff InfoSec Engineer

Palo Alto Networks; United States; On-site; USD 160,000 - 230,000; Full time

Benefits offered by this job

Healthcare plans

On-site gym

Equity grants

ESPP (Employee Stock Purchase Plan)

12 weeks medical leave

6 weeks parental leave

Job summary

Palo Alto Networks is seeking a Staff InfoSec Engineer to design, implement, and automate scalable security solutions for multi-cloud environments (GCP, AWS, and Azure). You will define cloud security standards, implement preventative controls, and guide junior engineers in secure cloud practices.

In this role you will lead end-to-end delivery with cross-functional teams, collaborate with product teams on IaC security, and work with cloud partners to architect next-generation security solutions

Qualifications

• M.S./B.S. in Computer Science or equivalent
• 10+ years of relevant experience or equivalent military experience
• Solid understanding of DevSecOps, CI/CD pipelines and related tools
• Strong understanding of Cloud Identity and Access Management principles
• Hands-on experience with cloud distributed systems and high-scale designs
• Proficient in scripting languages like Python or Bash for security automation
• Familiar with IaC tools like Terraform or Ansible
• Knowledge of CSPM tools
• Experience designing secure cloud solutions for GCP, AWS, Azure
• Understanding of compliance frameworks such as FedRAMP, SOX, NIST, PCI-DSS
• Team player, high energy, and fast-paced

Responsibilities

• Design, implement, and automate scalable security solutions for multi-cloud environments
• Define cloud security standards and implement preventive, corrective, and detective controls
• Collaborate with product teams on securing cloud resources and IaC
• Provide security guidance to junior team members
• Provide technical leadership and end-to-end delivery with cross-functional teams
• Work with public cloud partners to design next-generation cloud security solutions
• Participate in all phases of the product development cycle
• Mentor and guide junior security engineers

Skills

DevSecOps

CI/CD pipelines

Cloud IAM

Python

Bash

Terraform

Ansible

CSPM

REST APIs

Data pipelines

Education

M.S./B.S. in Computer Science

Military experience equivalent

Tools

GitLab CI

Jenkins

Terraform

Ansible

Job description

• As a Staff InfoSec Engineer, you will design, implement, and automate scalable security solutions for multi-cloud environments like GCP, AWS, and Azure. You will define cloud security standards, implement preventative controls, and collaborate with product teams to secure cloud resources and infrastructure-as-code, providing security guidance to junior team members
• Design and implement scalable security solutions for multi-cloud environments (GCP, AWS, Azure)
• Automate security controls and processes in cloud environments to enhance overall security posture
• Define cloud security standards and implement preventive, corrective, and detective controls
• Collaborate with product teams on securing cloud resources and provide guidance on Infrastructure-as-Code
• Provide technical leadership and end-to-end delivery of solutions with cross-functional teams
• Work closely with public cloud partners to design and architect next-generation cloud security solutions
• Participate in all phases of the product development cycle, from definition and design to implementation and testing
• Provide security and engineering guidance to junior members of the team

Benefits

• Healthcare: We value your health and provide options so you can choose what best supports your lifestyle and personal health goals. Various nationwide plans - including Blue Shield of California, Kaiser Permanente, Delta Dental, VSP, and more - are available to you and your family. Our providers offer the flexibility you want and the coverage you need
• Wellness: With a large on-site gym and daily, instructor-led exercise classes at HQ in Santa Clara, Palo Alto Networks actively supports employee fitness. Our juice bar, Gym & Juice, features fresh juice blends, a quick and nutritious option pre- or post-workout. And our ongoing wellness speaker series highlights the latest trends in health and wellness
• Development: Professional development is serious business at Palo Alto Networks, where the Talent Development team offers 25+ courses to help employees boost their careers and develop leadership capability
• Financial: Most roles are eligible for equity grants, and we now offer new hires a quarterly vesting schedule right away. We want you to be fairly compensated and rewarded as soon as you make an impact - on our team, that happens immediately! And because we consider every employee a stakeholder in our long-term success, we offer an Employee Stock Purchase Plan (ESPP) with a 24-month lookback. From life insurance to health savings accounts, we provide ways to help you protect and grow your wealth. Palo Alto Networks offers both traditional and Roth 401(k) options, along with a company match of 50% to a max annual amount of $1,000
• Time Off: In addition to paid corporate holidays, Flexible Time Off programs empower our employees to balance their work schedules with personal time off. We offer 12 weeks of full pay for medical leave and 6 weeks of full pay for parental leave. As a company with strong ties to the military and veterans, we also offer 26 weeks of full pay for military leave
• Perks: Our corporate discount program provides employees with significant discounts on merchandise, travel and entertainment. We offer many on-site perks at headquarters, including cafeterias, fuel service, dry cleaning service, EV charging stations, and a company store. We also provide complimentary drinks, fresh fruit, and snacks in break rooms across our campus to help everyone power through the day.

Life at Palo Alto Network

M.S/B.S degree in Computer Science or equivalent and 10+ years of relevant experience or equivalent military experienceSolid understanding of DevSecOps principles, CI/CD pipelines, and related tools (e.g., GitLab CI, Jenkins)Strong understanding of Cloud Identity and Access Management principlesHands-on experience with cloud distributed systems and high-scale designsProven hands-on experience in designing secure cloud solutions for GCP, AWS, and AzureStrong knowledge of scripting languages such as Python or Bash for security automationFamiliarity with infrastructure as code (IaC) tools like Terraform or Ansible with a focus on securityStrong understanding of Cloud Security Posture Management (CSPM) toolsExperience designing or building scalable REST APIs and data pipelinesStrong understanding of compliance frameworks such as FedRAMP, SOX, NIST, or PCI-DSSExcellent team player with strong analytical and problem-solving skillsHigh energy and the ability to work in a fast-paced environment with a can-do attitude