דרושים Manager Technical Customer Support Focused Services Cortex ב-Palo Alto

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Hire for and lead a team of MDR Analysts working globally, guide the team, create and improve processes, methodologies and capabilities that the team requires to work effectively
• Lead a team that analyzes incidents from real customer environments to identify ongoing threats to customer environments
• Provide critical feedback to the different product, research and engineering and threat hunting teams to help improve the products for the entire Palo Alto Networks’ customer base
• Work closely with Security Research, Threat Intelligence and Threat Hunting teams to remediate and detect new emerging threats

Your Experience

• Great interpersonal skills and a proven experience collaborating with customers
• Understanding of the threat landscape in terms of the tools, tactics, and techniques of attacks, as well as networking and security fundamentals
• Basic hands-on coding skills (e.g. Python)
• Excellent written and oral communication skills in English
• Experience investigating targeted, sophisticated or hidden threats
  • Background in forensic analysis and incident and response tools to identify a threat and determine the extent and scope of a compromise
  • Experience with investigative technologies such as SIEM, packet capture analysis, host forensics, and Endpoint Detection and Response tools
  • Understanding of how APTs operate and the attack cycle – different attack vectors, propagation and data exfiltration, lateral movement, persistence mechanism, etc.
  • Understanding of how organizations protect themselves from cyber-attacks, what tools are used and what remediation techniques are leveraged
• Advantages
  • Having worked in SOC analysis or an investigation environment
  • Having worked in Incident Response environment

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

• Cortex products use cutting-edge technologies to deliver and innovate fast, with attention to quality and details. The great majority of the Cortex engineering group is located in the TLV office, which allows us to operate at a high pace with short loops of decision-making
• We are looking for a passionate and skilled Team Leader to join our Cortex Platform Automation R&D group. You will develop new solutions that will transform the future of security orchestration and automation around the globe, specializing in Cloud environments
• You will lead your engineers to become the most professional engineers and your team will be responsible for the design, implementation, delivery, and quality of our services in an Agile environment
• Furthermore, you will be collaborating with global tech, product, and security research teams, interfacing with other groups around the globe, and joining a rapidly growing Cybersecurity community

Your Impact

• Leading an Engineering team, focused on Cloud providers’ data and cybersecurity use-cases
• Taking a leading role in the design and implementation of cloud ingestion and automation in Palo Alto Networks’ Next Gen SOC platform
• Setting high-quality standards, seeking and choosing technical solutions to meet current and future needs
• Providing technical leadership and guidance, including design and code reviews
• Being accountable for product delivery, quality, and timelines

Your Experience

• 5+ years of proven hands-on experience in software development
• 1+ years of proven hands-on experience with Python
• Experience with Cloud environments and best practices.
• Prove experience in a management role - can be scrum master, tech lead or similar
• Good communication and visionary skills.
• Bachelor's degree in Computer Science/Engineering (or a related field) or equivalent military experience required

Nice to have

• Experience with Google console
• Experience with CI/CD
• Experience with Docker

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Job Summary

You’ll not only support investigations and incident triage, but also help onboard customers, answer technical questions about reports, alerts, and the service, and manage ongoing communications to ensure clarity, alignment, and satisfaction.

Key Responsibilities

• Be part of a customer-focused sub-function of the Unit 42 MDR team, dedicated to proactive communication and technical guidance
• Support onboarding activities for new customers
• Monitor incoming communication from customers (e.g., via email, comments), triage and route issues as needed, and answer technical questions around reports, alerts, and recommendations
• Collaborate with MDR analysts to ensure the customer’s technical questions about incidents or threats are fully addressed
• Own the customer communication lifecycle during ongoing incidents — ensure timely updates, clarity, and alignment on next steps
• Help drive consistency and quality in how incidents and threat intelligence are communicated externally
• Escalate and advocate for customer issues internally across Product, Engineering, and the broader Unit 42 team

Preferred Qualifications

• 1+ years of experience in a customer-facing cybersecurity role such as professional services, customer success, or customer support — must, Tier 1/2 SOC analyst experience
• Hands-on experience with tools such as EDR, SIEM, SOAR, or XDR
• Strong customer communication skills — verbal and written — with the ability to explain complex technical details clearly
• Experience reviewing, drafting, or presenting incident reports and security findings
• Familiarity with Cortex XDR or Cortex XSOAR
• Experience onboarding new security services or clients
  

This role includes participation in our weekend coverage rotation supporting global MDR operations:

• 3 weekends per month Tuesday - Saturday schedule)

• 1 week per month with a Monday– Friday schedule

• May require evening and night shifts aligned to operational needs

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

You will create statistics-based classification algorithms detecting everything from new malware through process behavior and attackers operating in enterprise-scale networks using data from multiple Windows endpoints; from analyzing attack patterns, finding statistical anomalies, and validating that you detect real attacks and APTs on real customer data.

Your Impact

• Research new methods to detect various attack techniques by utilizing enormous amounts and varied types of data
• Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities
• Take an active role in our collection modules by improving the ones that are already available and investigating new collection modules that will improve the quality of our detections
• Simulate attacks in the lab and conduct a deep analysis of the behavior
• Be part of a diverse research group, improving our research processes and leading us to be a better team, creating a better product
• Stay up to date with APTs, attacker methodologies, and TTPs

Your Experience

• In-depth knowledge of the inner-workings of operating systems (Especially Windows)
• Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise
• Vast experience and interest in malware research or development
• Python software development experience
• Comfortable conducting research and gathering insights by querying large databases
• Ability to drive and own projects
• Independent and team player, critical thinker

Advantages:

• Experience in machine learning or data analysis
• Reverse engineering knowledge and experience
• Advanced knowledge of Microsoft AD infrastructure
• Exploitation knowledge and experience

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Key Responsibilities

• You will be responsible for the complete software development life cycle including requirement analysis, design, development and deployment
• Take part in integrating the newest features and technologies, automate workflows, and create user friendly tools and frameworks for researchers.
• Produce elegant, generic, modular and extendable code
• Actively influence the processes and methods for researchers, affecting their day to day life

Required Qualifications

• BS in Computer Science or equivalent knowledge or equivalent military experience required
• 5+ years of software engineering experience
• Expertise in Python and Python internals
• Experience in designing, building and maintaining a user facing application/API
• Experience with Git or other source controls
• Good communication skills
• Self-driven with the ability to work independently, take initiative, and drive processes end-to-end

Advantages

• Experience with Kubernetes/Docker
• Experience with cloud infrastructure (GCP specifically)
• Knowledge of the cyber field
• Experienced with a variety of database technologies (Mysql / RocksDB / Google BigQuery)

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Join the fastest growing team where experience meets cutting-edge solutions

• Build and cultivate strong customer relationships, driving business growth within the region.

• Partner with the core sales team to align customer strategies and engagements with Cortex and Cloud business objectives.

• Take full ownership of leading strategic sales campaigns, sales forecasting, utilizing in-depth knowledge of sales cycles from initial contact through procurement.

• Engage in deep technical discussions beyond standard sales presentations and pitches; while translating complex technical cybersecurity solutions into clear business value propositions for customers.

• Collaborate closely with cross-functional teams, including sales engineers, to provide tailored customer-centric solutions.

• Partner with Alliances to develop joint strategies, enhance customer engagement and deliver innovative solutions for existing and prospective clients.

• Travel domestically as needed to meet with customers and attend key business events.

Your Experience

• 5+ years of field sales experience focusing on key customer accounts and delivering value to Enterprise or Major-level accounts in the cybersecurity industry.

• Extensive platform selling experience in complex sales with multiple buying centers.

• Experience selling SIEM, EDR, XDR, SOC and SOAR solutions is highly preferred.

• Established trusted relationships with CIOs and CISOs with the ability to influence and drive strategic conversations

• Expertise in applying complex solution sales methodologies to drive results.

• Experience working with channel partners and a deep understanding of a channel-centric go-to-market strategy.

• Demonstrated ability to thrive in a fast-paced, high-growth startup environment while collaborating effectively with sales engineers and cross-functional teams.

• Experience operating in a continuous adoption, expansion, and upsell sales motion within a matrixed sales organization is preferred

• Willingness to travel domestically as necessary to meet business needs.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

This role may require travel to and from Palo Alto Networks, Inc. business meetings and events and requires reliable transportation to do so. If a hire chooses to drive in connection with company business, the hire for this role must maintain a valid driver’s license.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Windows Low Level Engineer in Prisma Access, you will be responsible for Architecting, designing and building the new generation of Prisma Access agent, re-imagining how remote work looks like

Your Impact

• Lead the architecture, design and implementation of a new product which will affect 10s of millions of people from the very early stage!
• Design, implement and test critical components in the product, including kernel drivers, and user-mode OS-related infrastructures, in C++,C
• Work in close coordination with other teams, other OS’s and other products to learn and leverage knowledge
• Participate in researching advanced technologies and their implications on connectivity and security
• Research new technologies and adapt them for use in the company’s products
• Write design documents,development guidelines, and best practices

Your Experience

• 5+ years of experience as a software engineer
• Proven experience with multi-threaded development under Windows
• Highly proficient in system-level C++ programming, including C++ 17(and above) features.
• Attention to detail, and high standards of secure coding
• Experience in Low-level development in kernel mode - is an advantage
• Experience in Windows Networking knowledge(NDIS, WFP, Filter, Miniport, File System and Winsock) - is an advantage
• Experience with networking protocols such as TCP/UDP, QUIC, MASQUE, ICE, and Proxy PAC - is an advantage
• Experience in working with undocumented API and reverse engineering - is an advantage

All your information will be kept confidential according to EEO guidelines.