Senior Cloud Security Researcher – Security Automation

About the role

Join Palo Alto Networks' Autonomous Cloud SOC team to shape the future of cloud defense. You will build automation that turns security signals into actionable investigations and responses across modern cloud environments.

Key responsibilities

• Design and implement the next generation Autonomous Cloud SOC, converting detections, posture findings, and emerging threats into intelligent workflows.
• Create automated playbooks that investigate signals, gather evidence, assess blast radius, validate risk, and guide or execute response actions.
• Work across cloud control planes, identity systems, Kubernetes, network telemetry, and posture data to produce high‑confidence outcomes.
• Leverage existing detections, continuously improve investigation logic, and keep response workflows effective as cloud environments and attacker techniques evolve.

Required profile

• 4+ years in security engineering, cloud operations, incident response, threat hunting, DevSecOps, or related fields.
• 2+ years hands‑on experience securing or operating AWS, Azure, or Google Cloud environments.
• Strong experience with Kubernetes, containers, and cloud‑native architectures.
• Deep understanding of cloud networking concepts such as VPC Flow Logs, Transit Gateways, service meshes, and traffic patterns.
• Solid knowledge of identity and access management (IAM) and its interaction with network controls.
• Experience with CI/CD pipelines, incident triage, containment, remediation, and posture management frameworks (e.g., CIS Benchmarks).
• Proficient scripting or programming in Python, Go, or Bash and excellent communication skills.

Required skills

• AWS, Azure, Google Cloud Platform
• Kubernetes and container orchestration
• Cloud networking (VPC Flow Logs, Transit Gateways, service meshes)
• IAM and policy management
• CI/CD pipelines
• Incident response and threat hunting
• Posture management and CIS Benchmarks
• Python, Go, Bash scripting