Staff Engineer Customer Success jobs at Palo Alto in United Kingdom, London

Being the cybersecurity partner of choice, protecting our digital way of life.

Role Overview

• The Unit 42 Malware team is a global team responsible for providing accurate malware analysis, threat hunting capabilities, and the development of malware automation pipelines. This role is designed for an experienced Reverse Engineer with familiarity specifically supporting consulting operations and threat intelligence. The role has flexible hours, but will have an on-call component that includes a commitment to shared coverage of high-priority tickets that may arrive between Friday through Sunday.

Required Skills

• Advanced knowledge with at least one disassembler (e.g. IDA Pro, Ghidra, Binary Ninja).

• Expertise with user-mode and kernel-mode debuggers (e.g. x64dbg, WinDbg, gdb).

• Developing and scaling reverse engineering automations (e.g. IDAPython, Ghidra Python, Docker).

• Deep understanding of modern malware techniques, including obfuscation and evasion tactics.

• Understanding of x86/x64 architecture and IL formats (e.g. .NET).

• Proficiency in at least one programming language (e.g. Python, C, C++).

• Knowledge of networking protocols (e.g. HTTP, DNS, TCP/IP) and analyzing traffic.

• Experience configuring sandboxes to increase hit-rate and accelerate analysis.

• Familiarity with prompt engineering and using LLMs to accelerate analysis.

• Advanced understanding of modern Windows internals relevant to malware analysis.

• Experience transforming/modifying malware to support analysis (e.g. deobfuscation).

• Familiarity with script deobfuscation and analysis (e.g. PowerShell, JavaScript)

Preferred Skills

• Proven track record of contributing to threat research initiatives

• Designing and building next-generation hunt tooling

What we Offer

• Hands-on experience with real-world malware and threats.

• Access to industry-leading tools and infrastructure.

• Opportunity to work on impactful projects that contribute to threat intelligence.

• A collaborative and supportive team environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

It is your responsibility to build solutions and enable PWC / Capgemini across EMEA. You will work with them to build a strong services practice, align and build relationships between them and Palo Alto Networks, and finally build joint value by demonstrating their strengths.

You will represent the company as a technical advisor tasked with building excitement and support for the company with PWC / Capgemini's sales and technical teams. You will travel and take ownership of the technical relationship with PWC / Capgemini to demo, train, enable, communicate with and continually engage technical partner team members by dedicatedly managing and delivering technical content and establishing relationships either onsite, online, and via telephone. You will have specific recruitment, enablement, training and communication objectives aligned with the objectives of the company.

Your Impact

• Ability to align partner needs and strategy with the value of Palo Alto Networks
• Provide product demos on all aspects of the Palo Alto Networks Platform
• Provide technical enablement and training to strategic/national partners
• Strategically position Palo Alto Networks with other technologies sold by partners
• Participate in partner business planning activities by supporting the development and execution of the partner technical business plan
• Facilitate the planning and preparation of partner Sales Engineers (SEs) in achieving Palo Alto Networks and industry certifications
• Oversee partner pre-sales activities, including competitive analysis, test plans, demos, proofs of concept, and RFPs
• Cross-communicate Palo Alto Networks and partner value propositions, especially between partner and Palo Alto Networks field SEs
• Understand and effectively present the Palo Alto Networks’ security platform
• Create, execute, and review a technical readiness plan with the CBM/regional sales team, including measurable achievements to track progress
• Provide localized technical training to partner’s pre-sales and post-sales technical resources
• Support product/service training of the partner sales teams
• Educate and promote the use of Palo Alto Networks support model and effective use of available resources
• Collaborate with the CBM/regional sales team on the development and management of the channel partner business plan and mutual action plans
• Understand and communicate the business advantages of a partnership with Palo Alto Networks
• Develop a strong understanding of Palo Alto Networks’ channel partner objectives

Your Experience

• General understanding of GSI routes to market across EMEA

• Specific experience working with Capgemini, PwC, or similar global systems integrators

• Strong communication and listening skills, including effective delivery of executive and technical presentations

• Ability to articulate complex concepts clearly, both in writing and in conversation, with structured and audience-appropriate messaging

• Understanding of how to qualify partner needs, co-develop solutions, and create strategic alignment

• Experience as a Solutions Engineer or in a technical role within a systems integrator environment

• Industry knowledge of security and networking product and technology trends

• Knowledge of competitive solutions and partner-aligned selling strategies

• Experience supporting the sale, demonstration, and enablement of network security products and platforms

• Familiarity with modern data centre and public cloud infrastructure technologies (e.g., containerisation, hybrid-cloud models)

• Awareness of modern threat landscapes, malware trends, and security risk domains

• Exposure to automation, orchestration, and endpoint security tools in partner or customer environments

• Relevant industry certifications (e.g., CISSP, SANS, CCSP, or equivalent) are preferred

All your information will be kept confidential according to EEO guidelines.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Serve as the single technical orchestrator for large, complex, and strategic XSIAM deployments.
• Direct Professional Services (PS), Solutions Consulting (SC), and Domain Consulting (DC) resources, orchestrating workstreams to ensure a successful customer deployment
• Educate and align customer security operations teams with XSIAM capabilities, running "day in the life" sessions and ensuring they can apply XSIAM to their specific workflows
• Coach and train field DC and PS teams during deployments to build their skills for future projects.
• Define, develop, disseminate, and improve best practices, templates, and knowledge that can be used by the broader field to scale our deployment capabilities
• Provide technical and product consultation while managing escalations and issues throughout the deployment lifecycle
• Lead customer workshops and gap analyses to assess customer needs, define outcomes, and identify any risks to a successful deployment
• Document improvement recommendations from deployments to feed back into our processes
• Help transition the team's focus long-term to a "health check" process and expand our success model to new use-cases

Your Experience

• Senior level technical acumen with XSIAM/SIEM solutions, including deep technical knowledge of all XSIAM capabilities
• Excellent customer-facing communication skills with strong executive presence
• Demonstrated ability to coordinate resources across multiple internal and external organizations
• A coaching and training mindset, with a proven ability to mentor others
• A "scale mindset" with a focus on using AI for data collection, developing reusable process concepts, and authoring best-practice documentation
• Ability to handle 4-5 concurrent deployment engagements
• Strategic mindset with strong problem-solving, analytical, and critical thinking skills

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Sr. TPE, you will play a key role in providing detailed technical information to our partners, customers, and our internal employees. You will be a strategic adviser to the business, driving valuable insight, guidance and feedback back into Palo Alto Networks. You will work across product teams to deliver this feedback

Your Impact

• Drive innovation within the modern Security Operations Center (SOC) by developing content and capabilities aligned with Cortex and detection-focused workflows.

• Collaborate with legal, sales, product, and customer-facing teams to translate security operations needs into actionable product improvements.

• Lead and coordinate cross-functional initiatives across product management, engineering, and field teams for high-impact security use cases.

• Build high-quality content for the Cortex Marketplace including detection rules, parsers, dashboards, and other SOC-enabling artifacts.

• Provide structured product feedback to influence roadmap decisions based on real-world SecOps challenges and opportunities.

• Create detailed documentation and usage guides tailored for analysts, detection engineers, and security practitioners.

• Promote operational excellence by designing scalable detection and response workflows grounded in industry best practices and threat-informed defense.
  

Your Experience

• Ability to inspire and align teams across functions, paired with strong execution and delivery skills.
• 2+ years of experience in security operations, threat detection, incident response, or detection engineering roles
• Solid understanding of SIEM, log analytics, data normalization, and detection lifecycle management (rule creation, tuning, suppression, enrichment)
• Hands-on experience with XSIAM or similar platforms (Splunk, QRadar, Sentinel, etc.) is a strong plus
• Strong technical writing and communication skills, with the ability to convey complex ideas clearly to both technical and non-technical audiences
• Skilled in scripting or automation (Python, JavaScript, etc.) for detection development or incident investigation tasks
• Experience managing multiple projects or programs in dynamic, fast-paced environments with cross-functional visibility
• Familiarity with cloud infrastructure (AWS, Azure, GCP), especially as it relates to telemetry ingestion, detection engineering, or automated response — a significant advantage
• Experience with CNAPP solutions (e.g., Prisma Cloud, Wiz, Orca) and integrating cloud posture, workload protection, or entitlement data into SecOps workflows — an advantage
• Bonus: Exposure to infrastructure-as-code, CI/CD pipelines, or cloud-native services and their intersection with SecOps

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Technical Product Engineer, you will play a key role in providing detailed technical information to our partners, customers, and our internal employees. You will be a strategic adviser to the business, driving valuable insight, guidance and feedback back into Palo Alto Networks. You will work across product teams to deliver this feedback

Your Impact

• Work cross-functionally with legal, sales, product management, and customer-facing teams to support innovation and execution.

• Coordinate and lead projects that span multiple departments to drive alignment and deliver impactful outcomes.

• Partner closely with Product Managers to provide feedback based on customer needs, field insights, and product gaps.

• Drive cloud-native security innovation for the modern SOC by identifying and enabling high-value use cases.

• Help design and deliver technical content for cloud security platforms, including integrations, guides, and automation examples.
  

Your Experience

• Proven ability to collaborate across functions, inspire teams and executives, and execute effectively in complex environments.

• Strong communicator with excellent verbal and written skills, capable of engaging both technical and executive stakeholders.

• 4+ years of experience with endpoint platforms, including hands-on work with forensics, EDR/SIEM, and incident response systems.

• Familiarity with the security operations landscape, including SIEM, XDR, SOAR, ASM, and SOC workflows.

• Experience in building SOC workflows, supporting incident response, and integrating security tools into enterprise environments.

• At least 2 years of hands-on experience with one or more major cloud platforms (AWS, Azure, GCP), including knowledge of cloud-native security principles.

• Experience with automation, scripting, and integration of security technologies in both cloud and on-prem environments.

• Familiarity with securing cloud workloads using contextual risk signals and automated enforcement.

• Knowledge of infrastructure-as-code (e.g., Terraform), CI/CD pipelines, and modern application architectures is a plus.

• Demonstrated ability to manage cross-functional projects and priorities in a fast-paced, enterprise-scale setting.

• Technically curious, highly motivated to master product details, and proactive in establishing best practices.

• Strong work ethic, organizational skills, and a high degree of integrity.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Sr. TPE, you will play a key role in providing detailed technical information to our partners, customers, and our internal employees. You will be a strategic adviser to the business, driving valuable insight, guidance and feedback back into Palo Alto Networks. You will work across product teams to deliver this feedback

Your Impact

• Drive innovation within the modern Security Operations Center (SOC) by developing content and capabilities aligned with Cortex and detection-focused workflows
• Collaborate with legal, sales, product, and customer-facing teams to translate security operations needs into actionable product improvements
• Lead and coordinate cross-functional initiatives across product management, engineering, and field teams for high-impact security use cases. Build high-quality content for the Cortex Marketplace including detection rules, parsers, dashboards, and other SOC-enabling artifacts
• Provide structured product feedback to influence roadmap decisions based on real-world SecOps challenges and opportunities
• Create detailed documentation and usage guides tailored for analysts, detection engineers, and security practitioners
• Promote operational excellence by designing scalable detection and response workflows grounded in industry best practices and threat-informed defense

Your Experience

• Ability to inspire and align teams across functions, paired with strong execution and delivery skills.
• 2+ years of experience in security operations, threat detection, incident response, or detection engineering roles
• Solid understanding of SIEM, log analytics, data normalization, and detection lifecycle management (rule creation, tuning, suppression, enrichment)
• Hands-on experience with XSIAM or similar platforms (Splunk, QRadar, Sentinel, etc.) is a strong plus
• Strong technical writing and communication skills, with the ability to convey complex ideas clearly to both technical and non-technical audiences
• Skilled in scripting or automation (Python, JavaScript, etc.) for detection development or incident investigation tasks
• Experience managing multiple projects or programs in dynamic, fast-paced environments with cross-functional visibility
• Familiarity with cloud infrastructure (AWS, Azure, GCP), especially as it relates to telemetry ingestion, detection engineering, or automated response — a significant advantage
• Experience with CNAPP solutions (e.g., Prisma Cloud, Wiz, Orca) and integrating cloud posture, workload protection, or entitlement data into SecOps workflows — an advantage
• Bonus: Exposure to infrastructure-as-code, CI/CD pipelines, or cloud-native services and their intersection with SecOps

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a highly motivated and customer-focused Technical Support Engineer for our global Cortex XSIAM Focused Services team at Palo Alto Networks, you'll be at the forefront of delivering world-class support. We're recognized as an industry leader for our "first-class support" methodology, and you'll be instrumental in upholding this standard.

You’ll provide dedicated technical support, handling incoming inquiries, escalations, phone calls, and emails efficiently and effectively, all while adhering to our defined Service Level Agreements. You won't just react to issues; you'll proactively seek out complex problems and find their resolutions before they escalate from our clients.

Your Impact

• Deliver a tailored customer experience by working closely with Technical Account Managers to understand clients' business goals and technical environments, with a focus on risk mitigation and network resilience
• Proactively identify and resolve risks, partnering with engineering teams to reproduce complex issues and drive permanent solutions
• Respond to user-reported issues in line with established Service Level Agreements (SLAs), ensuring timely and effective resolution
• Triage and manage technical inquiries through ticketing systems, phone calls, and remote sessions.
• Perform deep-dive troubleshooting at the application and operating system levels using your advanced technical expertise
• Diagnose root causes across code, configuration, or environment, and collaborate cross-functionally to implement fixes
• Provide actionable feedback to product and development teams based on customer-reported issues.
• Maintain clear, detailed documentation to support internal teams and enhance the customer support experience
• Lead or support root cause investigations, driving implementation of corrective and preventative actions to avoid recurrence

Due to the nature of this role and the customers we support, candidates must either:

• Have lived in the UK for the last 5 consecutive years, or

• Hold British Citizenship

• This is essential to obtain UK Security Clearance and is a strict hiring requirement.

We're seeking a proactive and skilled professional with a passion for cybersecurity and a strong customer-first mindset.

• 4+ years of experience as a Support Engineer, demonstrating a strong customer-centric approach.
• Previous experience with Endpoint Security software is required.
• In-depth SIEM experience, including: A deep understanding of how SIEMs work
• Experience creating custom collections and data parsing
• Proficiency in creating complex correlation rules, reports, and dashboards
• Experience with SIEM integration and implementation.
• Hands-on experience working with EDR tools
• Solid networking knowledge, with the ability to independently debug broad, complex, and unique environments with mixed applications and protocols
• Experience with Windows OS, macOS, and Linux-based applications (installation, troubleshooting, debugging)
• Fundamental understanding of Kubernetes, GCP, and AWS for troubleshooting cloud agent deployment and data extraction
• Exceptional written and verbal communication skills
• Strong customer advocacy skills and proven experience navigating challenging customer situations effectively
• Highly Valued Skills (Bonus Points For): Knowledge of Cloud infrastructure.
• Experience in incident response.
• Proficiency with scripting.
• Experience with MS Server solutions (SCCM, GPO, AD, MSSQL, IIS, Exchange).

You’ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised – in fact, you’ll seek them out to ensure our clients are safely supported. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.

All your information will be kept confidential according to EEO guidelines.