Principal Software Engineer, Device Security & Containers (NGFW) - NetSec
Palo Alto Networks3 days ago
Bengaluru, IndiaStaff+
Responsibilities
- Design and implement an isolated privileged container runtime for hosting the PANW security stack.
- Build network data-path integrations using netfilter hooks and eBPF programs for traffic interception and inspection.
- Benchmark and optimize on-device security inspection across different SoC tiers.
- Implement device IPS/IDS capabilities, including rogue device and signal-jamming detection.
- Develop application-layer post-quantum cryptography using vendor SoC PQC silicon support.
- Establish firmware security hardening, including read-only overlays and runtime attestation hooks.
- Serve as the primary technical interface between Palo Alto Networks and hardware teams for platform firmware, cloud agents, and hardware board bring-up.
Requirements
- 8+ years of embedded or systems security engineering experience in resource-constrained Linux environments.
- Production experience with eBPF for network traffic inspection or security monitoring, including XDP, TC, or socket filters.
- Experience with Docker or containerd in embedded Linux, including seccomp and capability management.
- Working knowledge of netfilter and nftables for traffic redirection and inspection.
- Strong programming skills in C, C++, and Python for tooling and test automation.
- Bachelor’s or master’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
- Preferred: IDS/IPS experience, including rogue device detection.
- Preferred: ML inference at the edge and deployment on resource-constrained hardware with NPU integration.
- Preferred: secure boot chains, firmware attestation, and TPM-backed trust anchors.
- Preferred: DPI, file sandboxing, network security protocols, packet processing, L2-L4 networking, data-plane forwarding, network processor programming, and DPDK performance tuning.
Benefits
- Most teams work from the office full time, with flexibility when needed.
- Palo Alto Networks provides reasonable accommodations for qualified individuals with disabilities or special needs.
- The employer is committed to equal employment opportunity and confidential handling of applicant information.
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.