דרושים Senior Soc Manager Infosec ב-Palo Alto ב-Israel, Tel Aviv-yafo

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

• Design and scale: Architect, build, and maintain production services for our thousands of Kubernetes clusters
• Infrastructure as Code: Develop and manage infrastructure as code to orchestrate our production and development environments
• Security first: Secure our production environments and integrate cutting-edge security tools and features
• Improve developer experience: Propose and implement processes and improvements that enhance the workflow for hundreds of developers
• Build and automate: Create robust CI pipelines and automation processes
• Collaborate: Partner closely with development teams to enhance software architecture for improved scalability, reliability, and cost-efficiency

Your Impact

• You'll be a key part of the Cortex Cloud DevOps group, responsible for ensuring our high-scale production services are reliable, secure, and performant. You'll have a direct impact on hundreds of developers by improving their daily workflows

Your Experience

• 4+ years of experience as a DevOps Engineer with a strong passion for technology and a commitment to high reliability
• High proficiency with GCP and HashiCorp tools like Terraform
• Experience managing high-scale production environments
• High proficiency with Linux
• Extensive experience with CI/CD and Configuration Management (Jenkins and GitLab are a plus).
• Deep knowledge of virtualized and containerized environments, especially Kubernetes and Docker.
• Strong scripting/coding skills in Python or Go
• Excellent communication and interpersonal skills, with the ability to work effectively across multiple teams
• The ability to quickly grasp new technologies and manage multiple responsibilities
• Nice to have : Databases like Cassandra, ScyllaDB, MemSQL, or MySQL
• Working with both internal and external customers

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Technical Program Manager, you will be responsible for designing and reviewing integrations with various information technology and security tools.

Good quality integrations that support customers’ use cases are the core of our platform. You’ll develop and execute operational engineering processes and help scale from early access through full launch.

Your Impact

• Create and review technical design requirements for third-party integrations
• Work closely with peers across different teams and disciplines to shape solutions and integrate with other parts of the product
• Work closely with Software Developers and Security Architects to design, research, and scope integrations
• Work closely with Customers, External Partners, Business Development, and Product to scope use cases and workflows
• Support cross-functional teams in the full software development life-cycle of integrations from design through implementation

Your Experience

• 4-5 years of experience as a Backend Developer / Technical Product Owner or technical-related field
• Hands-on experience with with at least one major cloud platform (e.g. AWS, GCP, Azure)
• Solid understanding of modern AI tools and platforms designed for software development (e.g., GitHub Copilot, OpenAI APIs, CodeWhisperer, etc.) and ability to effectively utilize AI-powered tools to enhance productivity and development workflows
• Solid background in working with third-party APIs and integrations
• Proven experience writing design/requirement documents for engineering teams
• Familiarity with scripting, debugging, or software development (Python - preferably)
• Thorough understanding of software development lifecycle from conception to delivery
• Excellent communication, organization, and influence skills
• Ability to resolve conflicts and drive issues to resolution and escalate when necessary
• Self-starter who enjoys problem-solving with little direct supervision - Ability to learn quickly and just in time

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• In-depth knowledge of designing and implementing a Zero Trust Network Architecture, including network and identity segmentation.
• Perform regular policy and firewall rule reviews to ensure alignment with access requirements and enforcement of Zero Trust principles.
• Providing advanced operations and engineering support for critical systems and services, including application and security infrastructure on-prem and in the cloud.
• Responsible for assessing and reviewing the security and cloud infrastructure in both IT and production environments.
• Coordinates with various teams to ensure appliances and services are configured with the correct posture to support business requirements.
• Continuous monitoring and improvement of IT support practices to enhance scalability, reliability, and performance in the product infrastructure.
• Assist in maintaining strong oversight of cloud computing solutions to safeguard against undue risks from third-party or external integrations.
• Develop automation using SOAR tools to streamline repetitive tasks and improve the overall efficiency of the security team.
• Collaborate with teams outside the Security Fusion Center, including Vulnerability Management, Network Engineering, OS Engineering, and product SRE.
• Prioritize and respond to critical vulnerabilities and data exposures with urgency and effective risk mitigation strategies.
• Develop and maintain security baselines for infrastructure components (e.g., VMs, containers, network devices) in alignment with CIS Benchmarks, NIST, and internal standards.
• Support incident response activities, including containment, forensic investigation, root cause analysis, and post-incident documentation.
• Contribute to governance, risk, and compliance (GRC) efforts, including audit participation, third-party risk assessments, and evidence collection for SOC 2, ISO 27001, or FedRAMP certifications.

Your Experience

• 8-10 years of hands-on experience in the Network and Infrastructure security technologies.
• 5+ years of experience with firewall technologies, including deep expertise with Palo Alto Networks Next-Generation Firewalls (NGFW) and security rule evaluation.
• 5+ years of experience managing and securing cloud environments across AWS and/or GCP with knowledge of native security tools and multi-cloud architectures.
• Proven ability to design, build, and maintain scalable cloud infrastructure and secure cloud-native applications, leveraging infrastructure-as-code (IaC) principles.
• Strong working knowledge of IP networking, including routing, switching, VPNs, DNS, NAT, load balancing, and wireless for both on-prem and cloud environments.
• Proficient in virtualization platforms such as VMware, with experience securing virtualized and hybrid workloads.
• Experience working with REST APIs, automation scripting using Python or Go, and integration of security workflows into infrastructure tools.
• Ability to evaluate and optimize firewall rules and access control policies across complex environments, aligning with Zero Trust and least privilege models.
• Solid foundation in certificate management and PKI, including experience issuing and renewing certificates, managing key lifecycles, and enforcing secure communication using TLS and mutual authentication.
• Strong experience with OS-level security hardening and configuration management across Linux (RHEL, Ubuntu) and Windows Server, including patching, log monitoring, enforcing CIS/NIST baselines, and secure user access controls.
• Proficient in managing and securing Microsoft Active Directory (AD) environments, including Group Policy, LDAP integrations, role-based access control (RBAC), and identity federation for hybrid cloud architectures.
• Self-motivated, strong troubleshooting skills, and capable of working independently in fast-paced environments with minimal supervision.
• Strong communication skills with the ability to collaborate effectively with cross-functional teams, including network operations, cloud infrastructure, IAM, and compliance.
• CISSP, AWS , GCP certifications preferred.
• PCNSE certification is a plus.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a member of the Virtualization team at Palo Alto Networks, you will develop our next-generation virtualization and service offerings. Responsibilities will include designing and implementing new features and integrations with Azure cloud and other public and private clouds. Core networking improvements in pure software environments in both Virtual machines and Container form factors.

Your Impact

• You will be expected to participate in all phases of the product development cycle, from definition, design, through implementation and test
• Develop functional specifications, assess task requirements and scheduling, and participate in development, debug and support
• Candidate should also have hands-on experience with virtualization technologies, various hypervisors, system software, networking, and have experience with Linux kernel software development

Your Experience

• 5+ years of hands-on software development experience with a BS/MS in Computer Science, Electrical Engineering, or equivalent military experience
• Expertise in C programming, with strong debugging and performance optimization skills
• Good understanding of the Linux kernel and networking stack, with a focus on performance and reliability
• Strong background in packet forwarding, tunneling protocols (IPSec/IKE, GRE, VxLAN etc.), and network data paths
• Deep knowledge of networking technologies including:
  • Layer 3 Routing
  • Routing protocols (like BGP, OSPF etc)
  • Packet processing and TCP stream inspection
• Experience in scripting (Python, Bash) for automation and tooling
• Exposure to network virtualization and acceleration technologies such as DPDK, XDP, and hypervisors is a plus
• A collaborative mindset with the ability to work closely with senior engineers in a dynamic, fast-paced environment

We define the industry, instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Establish yourself as a trusted advisor to prospects and customers working with Sales Specialists and the local partners
• Identify and document specific problems with prospective and current customers which can be solved through the deployment of integrated solutions
• Architect and propose validated solutions which address the identified problems in each individual environment
• Delivering presentations/demonstrations to prospective and current clients, PoC (Proof of Concept), RFP/RFI response
• Ensure ongoing customer satisfaction, support, and adoption
• Continuous self-improvement and learning to maintain technical leadership of applicable technologies (data center, SDN, public cloud, security, networking, etc.)
• Understand and effectively differentiate Palo Alto Networks against the main competitors
• Act as the customer advocate for any issues that require technical assistance and follow up with the customer until the issue is resolved

Your Experience

• 6+ years of Sales Engineering/Technical Pre-Sales experience in one or more of the following areas:
  • Networking and Network Security (FW, Proxy, etc.)
  • Host Protection (EDR/EPP)
  • Identity Management
  • Data leakage prevention
  • RBI Experience
• Understanding and/or hands-on experience in software development and web technologies
• Excellent presentation and time management skills
• Proven track record selling complex cyber security enterprise solutions
• Ability to lead by example and be a player coach for the more junior team members
• Building strong relationships with key customers helping them achieve their goals
• Conducting technical discovery calls and meetings
• Work closely with Product and R&D teams to represent the customer and ensure deliverables are in line with customer requirements and specifications
• Self-starter who is driven by outcome and success with strong commercial acumen
• Ability to present complex concepts to both technical and non-technical audience
• Willingness to travel extensively

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats.

Your Impact

• Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments
• Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior
• Develop and refine statistics-based classification algorithms and techniques to create and improve detection models
• Research specific scenarios to enhance our model's capabilities
• Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product
• Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats

Your Experience

• At least 5 years’ experience with Active Directory security and identity related attacks
• 2+ years of experience with Entra ID (formerly Azure AD) or SAAS application - Advantage
• In-depth knowledge of the inner-workings of operating systems
• In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc
• In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc
• At least 2 Years of experience coding Python - Advantage
• Strong knowledge of SQL language - Advantage
• Experience with red-teaming / pentest of Entra ID - Advantage
• Experience with machine learning / data analysis / cloud infrastructure / security - Advantage
• Ability to drive and own projects from start to finish
• Independent and a team player, a critical thinker

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Provision, configure, and support resilient hybrid cloud deployment architectures using the automation framework
• Collaborate with development teams to ensure applications are production-ready, scalable, and reliable from the outset
• Manage CI/CD platform, Linux infrastructure, and collaborate with other SREs to deploy and maintain the automation framework, perform capacity planning, and create and review operational runbooks.
• Set up critical infrastructure and develop tools and frameworks to automate operational tasks, including the deployment of machines, services, and applications
• Participate in Incident Command on-call rotation supporting critical applications and services.
• Conducts root cause analysis of critical business and production issues and drives future preventive measures
• Manage scalability, capacity planning, redundancy, and resiliency
• Maintain service availability and performance SLAs based on business and product requirements.
• Contribute to documentation related to design, deployment, validation, and operations
• Design proactive service monitoring, alerting, and trend analysis of underlying infrastructure, and support the operations team in implementation
• Establish end-to-end monitoring and alerting on all critical components of the application

Your Experience

• 6+ Years of system engineering experience on mission-critical, enterprise-level systems
• 6+ years of experience using Infrastructure-As-Code to build large-scale environments, mainly on Linux platform (Ubuntu, SUSE, CentOS).
• 3+ years of experience working with cloud environments, primarily Google Cloud Platform
• Demonstrated Linux/Systems experience in a hybrid (cloud, on-prem) environment
• Strong experience with CI/CD pipeline, GitHub, Jenkins, Artifactory
• Must have a strong foundation in Linux operating systems, Troubleshooting, Design, and Implementation
• Expertise in configuration management with a framework such as Terraform, Ansible, and Helm.
• Experience using Infrastructure-As-Code to build large-scale environments
• Experience with Linux vulnerability management process and patching
• Must have programming knowledge in Python/Bash/Perl/Go languages to automate infrastructure workflow
• Understanding of software development methodologies and practices, including agile development, continuous integration, and continuous delivery
• Understanding of Network Firewalls, load balancers, and complex network designs
• Experience in monitoring technologies like Datadog, Nagios, Graphite, Cacti, and Grafana.
• Understanding Kubernetes, container lifecycle, and troubleshooting
• Hands-on knowledge of high-availability approaches such as load balancing, failover, clustering, and disaster recovery
• Excellent problem-solving, critical thinking, communication, and teamwork skills
• Passion, drive, energy, a sense of humor, and a great attitude

All your information will be kept confidential according to EEO guidelines.