Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Manage, analyze, and enhance Palo Alto Networks NGFW environments and security policies.

• Utilize App-ID, User-ID, URL Filtering, and other associated security controls.

• Examine firewall traffic, logs, sessions, and security events to detect threats and policy inefficiencies.

• Review firewall rules for consolidation, modification, cleaning, and removal while ensuring security controls are maintained.

• Evaluate the security advantages of rule alterations against the operational impacts on essential business applications.

• Investigate application traffic and connectivity challenges and decide on suitable firewall policy adjustments.

• Support and manage Cortex XDR, including alert, endpoint security events, and telemetry analysis.

• Adhere to ITIL, change management, and security governance processes for firewall and policy modifications.

• Test, document, review, and secure approval for rule deletions, consolidations, and modifications prior to implementation.

• Keep comprehensive records of security policies, changes, testing outcomes, and operational impacts.

• Identify opportunities for enhancing firewall performance, security posture, policy effectiveness, and operational processes.

• Develop and utilize APIs, CLI tools, Python, or other scripting languages to automate security and firewall management.

• Resolve complex network and security challenges using traffic analysis, logs, packet captures, and diagnostic methods.

• Collaborate with network, infrastructure, application, and security teams to comprehend requirements and address issues.

• Independently investigate problems, devise solutions, and execute approved changes while keeping stakeholders informed.

⛳️ Requirements

• Extensive hands-on experience in administering and optimizing Palo Alto Networks NGFW environments.

• Expertise with App-ID, User-ID, URL Filtering, security policies and rule optimization, as well as firewall traffic and log analysis.

• Experience with Cortex XDR and analysis of endpoint/security events.

• Strong grasp of network security principles, firewall architectures, application traffic, and the design of security policies.

• Advanced analytical and troubleshooting capabilities for complex traffic and log data.

• Capacity to evaluate security enhancements against business and application impacts.

• Solid understanding of ITIL and formal change control protocols.

• Experience in making security policy modifications where service availability and operational stability are paramount.

• Ability to document, test, and validate changes prior to implementation.

• Proficiency with Palo Alto APIs, CLI tools, Python, or other scripting/automation technologies.

• Strong written and verbal communication skills.

• Capability to work autonomously as well as collaboratively.

• Strict availability from 8 AM to 5 PM during agreed-upon business hours; full commitment and consistent responsiveness are required.

• Preferred: Certifications from Palo Alto Networks such as PCNSA, PCNSE, or PCCET.

• Preferred: Experience with large-scale or enterprise-level Palo Alto firewall setups.

• Preferred: Experience in firewall rulebase cleanup, optimization, and remediation of security policies.

• Preferred: Knowledge of network packet analysis and tools such as Wireshark.

• Preferred: Familiarity with SIEM, SOAR, or other security monitoring and automation platforms.

• Preferred: Automation experience with Python or REST APIs.

🏝️ Benefits

• Opportunity for remote work.

• Contract-based position.

• Inclusive workplace culture.

• Accommodations or adjustments available throughout the interview process and beyond.