Data Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Architect, implement, manage, and enhance Palo Alto Networks next-generation firewalls across various environments including data centers, campuses, branches, cloud, and remote access.

• Oversee centralized firewall management through Palo Alto Panorama.

• Design and uphold least-privilege, application-aware security policies along with associated security controls.

• Direct the operational use of the Palo Alto Networks Strata portfolio.

• Deploy and operationalize Cortex capabilities for security analytics, detection, investigation, automation, orchestration, and response.

• Investigate security alerts, unusual traffic, malware incidents, policy breaches, data-exfiltration signals, and firewall-related occurrences.

• Develop and fine-tune detections, correlation logic, dashboards, investigations, and response playbooks.

• Construct and maintain secure network segmentation strategies, including zone-based architecture and microsegmentation.

• Collaborate with Cisco network engineering teams on routing, switching, VPN, wireless, identity, and network-access controls.

• Support Cisco security technologies and enterprise network services.

• Review, approve, implement, and document firewall and network-security change requests.

• Conduct firewall rulebase reviews, access recertifications, risk assessments, policy cleanup, and validation of security controls.

• Maintain network security diagrams, data-flow documentation, firewall standards, runbooks, architectural decisions, and escalation procedures.

• Perform vulnerability and configuration assessments and validate remediation efforts.

• Collaborate with Security Operations, Incident Response, Cloud Engineering, Infrastructure, Application Development, GRC, and Audit teams.

• Provide technical mentorship while leading intricate troubleshooting and root-cause analysis.

• Assess emerging technologies, platform features, and threat trends, recommending enhancements to the enterprise security roadmap.

⛳️ Requirements

• Bachelor’s degree with 12+ years of relevant experience (or equivalent experience).

• Over 10 years of progressive experience in cybersecurity, network security, security engineering, or security operations, with significant hands-on firewall administration and incident-response experience.

• In-depth expertise in administering Palo Alto Networks next-generation firewalls in intricate enterprise environments.

• Advanced knowledge of Palo Alto Panorama, including centralized policy management, device-group design, templates, HA workflows, logging, upgrades, troubleshooting, and configuration governance.

• Strong practical understanding of Palo Alto Strata security features, encompassing NGFW architecture, App-ID, User-ID, Content-ID, security profiles, decryption, segmentation, and policy optimization.

• Extensive experience with Palo Alto Cortex products or related XDR/EDR/SOAR/SIEM technologies.

• Capability to investigate and resolve complex network-security challenges using packet captures, firewall traffic logs, threat logs, system logs, routing information, and endpoint telemetry.

• Strong background in Cisco networking, including TCP/IP, DNS, DHCP, NAT, routing, switching, VLANs, VRFs, BGP/OSPF fundamentals, VPNs, network segmentation, and high-availability concepts.

• Experience supporting Cisco Secure Firewall/Firepower, ASA, ISE, Secure Network Analytics, Catalyst switching, Nexus switching, enterprise routing, and wireless platforms.

• Comprehensive understanding of zero trust, least privilege, defense in depth, identity-aware access, network segmentation, threat prevention, encryption, logging, and vulnerability management.

• Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, ISO 27001, PCI DSS, HIPAA, SOX, or similar standards.

• Strong written and verbal communication skills.

• Must be able to obtain and maintain an AOUSC Public Trust.

• Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (preferred).

• Palo Alto Networks certifications such as PCNSA or PCNSE (preferred).

• Cisco certifications such as CCNA, CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, or CCIE Security (preferred).

• Experience with cloud networking and security in AWS, Microsoft Azure, and/or Google Cloud Platform.

• Expertise in infrastructure-as-code, automation, or scripting using Python, PowerShell, Ansible, Terraform, REST APIs, or Panorama APIs.

• Experience with SIEM platforms, log pipelines, threat intelligence, vulnerability-management tools, and network detection and response capabilities.

• Proven experience leading security projects, technical workstreams, audit remediation, control modernization, or enterprise-wide firewall migrations.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance plans.

• Generous paid time off and holidays.

• Opportunities for professional development and training.

• Retirement savings plan with company match.

• Flexible work arrangements and a supportive work environment.