Security Engineer - Focused Services (Cortex)

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary You will work firsthand with our valued customers to address their complex post-sales concerns where analysis of situations or data requires an in-depth evaluation of many factors. You’re a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You’ll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non-technical and technical professionals. You will regularly participate in technical discussions with multi-functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Your quick thinking and support to our clients provides the fast assistance they need to keep their environments secure - which means you’ll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations). Your Impact Provide customers on-site support, deployment and implementation, knowledge transfer, configurations, troubleshooting, and standard methodologies to customers via phone, e-mail, and web. Use fault isolation and root cause analysis skills to diagnose and tackle complicated technical issues Provide post sales technical support, while handling support cases to ensure issues are recorded, tracked, resolved, and follow-ups finished in a timely manner Work to reproduce customer issues and qualify critical issues Publish Technical Support Bulletins and other user documentation in the Knowledge Base Build a positive customer experience by working closely with Development, Sales, Quality Assurance, and Marketing Responsible for reviewing user documentation for training materials, technical marketing collateral, manuals, problem solving guides, etc. Provide on-call support 24x7 on an as needed basis Travel may be required to customer sites in the event of a critical situation to expedite resolution Work shoulder to shoulder with the Sales and Sales Engineering Teams. Qualifications Your Experience 4+ years of deep technical knowledge and technical support with a strong customer focus or related experience Experience with automation and orchestration concepts, including scripting, API usage, and workflow design; experience with SOAR platforms such as Cortex XSOAR – advantage Proficiency with SIEM and analytics platforms such as IBM QRadar, Splunk, ArcSight, FortiSIEM, Trellix, and Cortex XSIAM, including parsing, correlation, data modeling, and dashboard development. Hands-on experience deploying and supporting Endpoint security technologies and solutions, including EDR/XDR, SOAR, and SIEM platforms. (Palo Alto Cortex XDR, McAfee Endpoint Security, Data Loss Prevention (DLP), CrowdStrike, and Symantec products) Strong scripting and automation skills using Python, Bash, and Powershell. Experience building queries, correlations, detections, and dashboards in SIEM or analytics platforms. Understanding of security detections, alerting, incident response workflows, and threat analysis methodologies, including familiarity with MITRE ATT&CK. Experience investigating issues and incidents across network, endpoint, cloud, and identity domains, with the ability to identify root cause and reduce false positives. Strong knowledge of networking technologies and protocols, including DNS, IP routing, SSH, FTP, HTTP/HTTPS, email routing, and Internet security. Proven experience deploying, maintaining, and troubleshooting multi-vendor firewall environments, including Cisco, Check Point, Juniper, and Fortinet. Experience with Palo Alto Networks NGFW and VM-Series is a strong advantage. Proficiency with Windows, Linux, macOS, iOS, and Android, including installation, troubleshooting, and debugging. Experience with enterprise deployment and management tools such as SCCM, Group Policy, Active Directory, and JAMF. Knowledge of cloud platforms such as AWS, Azure, and GCP, and familiarity with VDI environments such as VMware and Citrix is a plus. Experience with Docker and other container technologies is a plus. Excellent analytical, troubleshooting, problem-solving, and critical thinking skills, with the ability to work independently in broad and complex environments. Strong project management, organizational, time management, and interpersonal skills. Prior experience working in a vendor Technical Assistance Center (TAC) or similar support organization is a plus. Strong interest in transitioning from network and security engineering into security operations, detection engineering, and automation. Experience with Israeli Defense Forces (IDF) technology or computer units is a significant advantage. Active Israeli Ministry of Defense security clearance is a strong plus. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.