About Palo Alto Networks
Sourced by ZipRecruiter
Industry
Network security
Company size
10,000+ Employees
Headquarters location
Santa Clara, CA, US
Year founded
2005
Full-time
Posted 6 days ago
Job description
Job Summary:
Palo Alto Networks is dedicated to protecting the digital way of life through innovative technology. As a Staff Software Engineer on the Infosec Product Security team, you will be responsible for integrating security into all products and leading security initiatives while collaborating with cross-functional teams.
Responsibilities:
• Build next gen Appsec technologies with automation into complex engineering CI/CD pipelines
• Protect application security throughout the life-cycle in the cloud (GCP & AWS) and on the premise
• Build risk driven intelligent automation to optimize SAST, SCA, OSS, DAST, Infra as Code (IaC), RASP integrations with advanced tooling integration
• Evangelize and lead the adoption of SDLC and security best practices across the entire application lifecycle - You’re someone that possesses strong knowledge of security from infrastructure through application and wants to help people apply it.
• Contribute to the security assessment and mitigation strategies for AI/ML models and applications. Stay informed about emerging threats and vulnerabilities related to AI security.
• Define and implement security tooling with the goal of improving coverage and time to action.
• Participate in the design and implementation of secure software development processes, including secure coding practices, security testing, and vulnerability management.
• Improve security reporting, including coordinating vulnerability management, penetration testing, and infrastructure compliance.
Qualifications:
Required:
• 1+ years of hands-on experience in cybersecurity in general, with 2+ years experiences in application security, pen test, security benchmarks, and automation
• Security tooling and best practices, such as pre-commit/pre-receive hooks, dependency scanning, SAST, IAST, OSS, DAST, RASP, and vulnerability management, etc.
• Experienced on Security tools benchmarking and fine tuning.
• Basic understanding of AI/ML security concepts, including adversarial attacks, model poisoning, and data privacy. Familiarity with tools or frameworks for AI security testing and vulnerability scanning is a plus.
• Perform code reviews, static code analysis, and security testing to identify and remediate vulnerabilities in our software products.
• Familiarity with industry security standards and best practices (e.g., OWASP, NIST, ISO).
• Integration, design, and architecture of AWS and/or GCP services into IAM platforms
• Microservice architecture expertise and best practices in securing APIs across multi-cloud environments
• Effective written and oral communication with multiple levels of leadership involving both the business and technical sides of the business
• Education: Bachelor's degree from four-year college or university or equivalent training, education, and experience in information / cyber security, computer systems, IT, etc. or equivalent military experience required
Company:
Palo Alto Networks is a cybersecurity company that offers cybersecurity solutions for organizations. Founded in 2005, the company is headquartered in Santa Clara, USA, with a team of 10001+ employees. The company is currently Late Stage.
Palo Alto Networks is dedicated to protecting the digital way of life through innovative technology. As a Staff Software Engineer on the Infosec Product Security team, you will be responsible for integrating security into all products and leading security initiatives while collaborating with cross-functional teams.
Responsibilities:
• Build next gen Appsec technologies with automation into complex engineering CI/CD pipelines
• Protect application security throughout the life-cycle in the cloud (GCP & AWS) and on the premise
• Build risk driven intelligent automation to optimize SAST, SCA, OSS, DAST, Infra as Code (IaC), RASP integrations with advanced tooling integration
• Evangelize and lead the adoption of SDLC and security best practices across the entire application lifecycle - You’re someone that possesses strong knowledge of security from infrastructure through application and wants to help people apply it.
• Contribute to the security assessment and mitigation strategies for AI/ML models and applications. Stay informed about emerging threats and vulnerabilities related to AI security.
• Define and implement security tooling with the goal of improving coverage and time to action.
• Participate in the design and implementation of secure software development processes, including secure coding practices, security testing, and vulnerability management.
• Improve security reporting, including coordinating vulnerability management, penetration testing, and infrastructure compliance.
Qualifications:
Required:
• 1+ years of hands-on experience in cybersecurity in general, with 2+ years experiences in application security, pen test, security benchmarks, and automation
• Security tooling and best practices, such as pre-commit/pre-receive hooks, dependency scanning, SAST, IAST, OSS, DAST, RASP, and vulnerability management, etc.
• Experienced on Security tools benchmarking and fine tuning.
• Basic understanding of AI/ML security concepts, including adversarial attacks, model poisoning, and data privacy. Familiarity with tools or frameworks for AI security testing and vulnerability scanning is a plus.
• Perform code reviews, static code analysis, and security testing to identify and remediate vulnerabilities in our software products.
• Familiarity with industry security standards and best practices (e.g., OWASP, NIST, ISO).
• Integration, design, and architecture of AWS and/or GCP services into IAM platforms
• Microservice architecture expertise and best practices in securing APIs across multi-cloud environments
• Effective written and oral communication with multiple levels of leadership involving both the business and technical sides of the business
• Education: Bachelor's degree from four-year college or university or equivalent training, education, and experience in information / cyber security, computer systems, IT, etc. or equivalent military experience required
Company:
Palo Alto Networks is a cybersecurity company that offers cybersecurity solutions for organizations. Founded in 2005, the company is headquartered in Santa Clara, USA, with a team of 10001+ employees. The company is currently Late Stage.
paloaltonetworks.com
Most Popular Jobs Similar to Staff Engineer
principal engineer
lead engineer
technical staff engineer
senior principal engineer
senior engineer
engineer manager
chief engineer
engineering lead
general engineer
engineering team leader
Other Helpful Pages Related To Staff Software Engineer (Infosec)
Golang Salaries
Golang Career Research
Frequently asked questions
Q: What skills or qualities help someone succeed as a Staff Engineer?
A: To succeed as a Staff Engineer, one should possess strong technical skills such as in-depth knowledge of software development methodologies, proficiency in programming languages, and expertise in specific domains like cloud computing, cybersecurity, or artificial intelligence. Additionally, essential soft skills include effective communication, leadership, and mentoring abilities, as well as strong problem-solving and analytical thinking skills to drive technical decisions and guide team members. These technical and soft skills enable Staff Engineers to drive technical strategy, lead complex projects, and contribute to the growth and development of their teams, ultimately supporting their career advancement and effectiveness in the role.
Q: What is the career path for a Staff Engineer?
A: A Staff Engineer's typical career progression involves starting as a Software Engineer or equivalent entry-level role, progressing to Senior Engineer or Technical Lead, and eventually becoming a Staff Engineer, a senior technical expert responsible for guiding teams and driving technical strategy. Key opportunities for skill development and growth include mentoring junior engineers, contributing to open-source projects, and developing expertise in emerging technologies, which can enhance their leadership, communication, and technical skills. Long-term, Staff Engineers may pursue leadership roles, such as Engineering Manager or Director of Engineering, or transition into technical leadership positions in other areas, like Product Management or Research and Development.
