Principal Consultant of Offensive Security, Palo Alto Networks
More information about location
Leading cybersecurity protections and software platform
Be an early applicant
Leading cybersecurity protections and software platform
1001+ employees
Be an early applicant
More information about location
1001+ employees
Company mission
To be the cybersecurity partner of choice, protecting our digital way of life.
Role
Who you are
- 8+ years of professional experience with cyber security tools, technologies, and methods focused on Red/Purple Teaming
- Demonstrate a deep understanding of how malicious software works (i.e.malware, trojans, rootkits, etc.)
- Ability to modify known and/or craft custom exploits manually without dependence on consumer tools
- Ability to create bypasses to security tools, and weaponize payloads for delivery on social-engineering engagements
- Demonstrable experience of evasion techniques
- Strong experience with Active Directory and attack killchain
- Experience with penetration testing, administering, and troubleshooting major flavours of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure)
- Experience with scripting and editing existing code and programming using one or more of the following - Perl, Python, ruby, bash, C/C++, C#, or Java
- Ability to read and use the results of mobile code, malicious code, and anti-virus software
- Demonstrable experience of threat-intelligence led red teaming frameworks such as CORIE, CBEST, TIBER-EU
- Track record of championing innovation and improvement initiatives for your area of expertise, identifying emerging trends and technologies and developing leading solutions to address client needs
- Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience or equivalent military experience to meet job requirements and expectations
- Professional industry certifications such as
- Offensive Security Certified Expert (OSCE)
- Offensive Security Certified Professional (OSCP)
- CREST Registered Tester (CREST CRT)
- GIAC Penetration Tester (GPEN)
- CREST Certified Simulated Attack Specialist (CCSAS
What the job involves
- As a member of our team, you will be shaping the future of cybersecurity
- We work fast, value ongoing learning, and we respect each employee as a unique individual
- Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported
- This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!
- The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients
- The individual will utilize a variety of tools developed and act as a key team member and leader in client engagements
- They will be the client’s advocate for cybersecurity best practices and will provide strong recommendations in this domain
- Perform red and purple team assessments (with and without industry regulator oversight), assumed breach assessments (red team engagements with a pre-deployed implant), ransomware readiness reviews (assessing susceptibly to modern ransomware threats), threat analysis and social-engineering assessments
- Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements - Examples include Terraform and Ansible, custom payload generators / loaders
- Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders
- Lead scoping and services overview conversations with clients for prospective engagements in area of expertise, presenting with credibility and authority, clearly articulating various testing approaches and methodologies to audiences ranging from highly technical to executive personnel
- Determines processes and procedures to be followed on assignments - On large and complex engagements, lead technical workstreams with guidance and oversight as required
- Leads communications with clients on engagements, including highly technical matters, ensuring client inquiries are responded to promptly
- Ability to lead engagement delivery through to completion, manage engagement economics to deliver projects on time and on budget and uphold high standards of quality
- Mentor and coach new team members and lead by example, demonstrating technical skills and procedures during engagements - Delegate tasks and provide feedback to empower team members to produce high-quality results
Salary benchmarks
Our take
With cyber threats evolving at lightening speed, businesses need robust solutions to protect their data and infrastructure. And the global cybersecurity market is projected to grow significantly, driven by increasing cyberattacks and the adoption of digital transformation initiatives. Because of this, companies are seeking security platforms that can address these challenges efficiently.
That's where Palo Alto Networks steps in, a frontrunner in the cybersecurity arena. It offers a suite of AI-powered security solutions designed to safeguard enterprises across various sectors. Its platforms, such as Cortex XSIAM and Prisma AIRS, integrate advanced threat detection, zero trust architecture, and real-time response capabilities so organizations are ready to manage and mitigate risks.
Its leadership is evident too, with impressive growth and strategic partnerships. Recently the company surpassed $1.5M in sales through the Google Cloud Marketplace, highlighting the demand for its innovative security solutions. Additionally, a collaboration with AT&T aims to enhance cybersecurity offerings, further solidifying its position in the market.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (2 rounds)
Sep 2022
$34m
SERIES A
May 2022
$11m
SEED
Total funding: $45m
Company benefits
- Healthcare: We value your health and provide options so you can choose what best supports your lifestyle and personal health goals. Various nationwide plans — including Blue Shield of California, Kaiser Permanente, Delta Dental, VSP, and more — are available to you and your family. Our providers offer the flexibility you want and the coverage you need
- Wellness: With a large on-site gym and daily, instructor-led exercise classes at HQ in Santa Clara, Palo Alto Networks actively supports employee fitness. Our juice bar, Gym & Juice, features fresh juice blends, a quick and nutritious option pre- or post-workout. And our ongoing wellness speaker series highlights the latest trends in health and wellness
- Development: Professional development is serious business at Palo Alto Networks, where the Talent Development team offers 25+ courses to help employees boost their careers and develop leadership capability
- Financial: Most roles are eligible for equity grants, and we now offer new hires a quarterly vesting schedule right away. We want you to be fairly compensated and rewarded as soon as you make an impact – on our team, that happens immediately! And because we consider every employee a stakeholder in our long-term success, we offer an Employee Stock Purchase Plan (ESPP) with a 24-month lookback. From life insurance to health savings accounts, we provide ways to help you protect and grow your wealth. Palo Alto Networks offers both traditional and Roth 401(k) options, along with a company match of 50% to a max annual amount of $1,000
- Time Off: In addition to paid corporate holidays, Flexible Time Off programs empower our employees to balance their work schedules with personal time off. We offer 12 weeks of full pay for medical leave and 6 weeks of full pay for parental leave. As a company with strong ties to the military and veterans, we also offer 26 weeks of full pay for military leave
- Perks: Our corporate discount program provides employees with significant discounts on merchandise, travel and entertainment. We offer many on-site perks at headquarters, including cafeterias, fuel service, dry cleaning service, EV charging stations, and a company store. We also provide complimentary drinks, fresh fruit, and snacks in break rooms across our campus to help everyone power through the day. Life at Palo Alto Network
Company HQ
Santa Clara, CA
Leadership
Nikesh Arora
(CEO & Chairman)Previously the President and COO at SoftBank, CBO at Google, and CMO at T-Mobile.
Nir Zuk
(Founder & CTO)Previously CTO at NetScreen Technologies, which was acquired by Juniper Neworks in 2004. They also co-founded OneSecure where they served as CTO and was the Principal Engineer at Check Point Software Technologies.
Lee Klarich
(CPO)Initially joined Palo Alto in 2006 as the EVP of Product Management and became CPO in 2018. Prior to this, they were the Director of Product Management at Juniper Networks and a Product Line Manager at NetScreen Technologies.
Share this job
View 205 more jobs at Palo Alto Networks