Senior Information Security Analyst

IN THIS ROLE, YOU WILL:

• Actively support and perform “hands-on” technical and analyst work with the Prisma Cloud Enterprise (PCE) product, ensuring effective delivery of product roadmap.
• Develop Custom RQL queries to implement new policies to check for resource configuration drift and anti-patterns.
• Define and operationalize alerts in Prisma Cloud Enterprise (PCE).
• Collaborate with partners to support the remediation or “burn down” of alerts/findings in PCE, as well as participating in related analysis work required for the automation of alerts/findings remediation.
• Provide professional expertise relating to Application Lifecycle Security and resolving application security issues detected via Prisma Cloud and related tools/technologies.
• Be a motivated self-starter quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines.
• Share your PCE expertise and knowledge with teammates, while completing assigned duties.

REQUIRED QUALIFICATIONS:

• 5+ years of security engineering or security architecture experience working with Prisma Cloud Compute & Prisma Cloud Enterprise product
• 2+ years of intermediate to advanced experience with private and/or public cloud computing/hosting
• 1+ year of intermediate to advanced experience with Palo Alto Prisma Cloud Enterprise
• Development capability creating Prisma Cloud custom policies via RQL
• Integration experience with Prisma Cloud and external systems
• Experience enabling auto-remediation via Prisma Cloud
• Solid understanding of Identity & Access Management, as well as Information Protection concepts as they apply to monitoring and responding to related alerts/findings
• Expertise and experience with API driven automation of policy creation
• Strong understanding of and ability to apply knowledge of industry/government standards and frameworks to “real world” business and technical requirements (e.g. NIST, CIS, CSA, FFIEC, ISO)
• Intermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint)
• Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight
• Ability to handle multiple, high priority deliverables concurrently
• Ability to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners

DESIRED QUALIFICATIONS:

• Experience supporting Cloud implementation/migrations and/or Cloud Security engineering and operations
• Cloud, Risk and Cybersecurity certification highly preferred (e.g., CISA, CISM, CISSP, CRISC, CCSK)
• Microsoft Azure and/or Google Cloud Certifications
• Experience with other Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) tools, such as: Microsoft Defender, Google Command Center, Aqua Security, Microsoft Sentinel
• Experience with Google Chronicle or similar Cloud SEIM (Security Events & Incident Management) tools
• Understanding of information security threats, trends and industry best practices and security tools
• Finance sector security experience or other regulated industry (e.g., utilities, health care, government)
• Knowledge and understanding of diverse platforms and operating systems, including current and emerging technologies
• Agile experience