Principal Consultant, AI Assessments, Proactive Services (Unit 42) - Remote
我们的使命
在Palo Alto Networks®，我们因共同的使命而团结——保护我们的数字生活方式。我们在创新与影响的交汇点上蓬勃发展，用尖端技术和大胆的思维解决现实世界的问题。在这里，每个人都有发言权，每个想法都算数。如果你准备好与同样充满热情的人一起，开展职业生涯中最有意义的工作，那么你来对地方了。
我们是谁
为了成为首选的网络安全合作伙伴，我们必须开拓道路，塑造行业的未来。这是我们的员工每天都在努力实现的目标，由我们的价值观定义：颠覆、协作、执行、诚信和包容。我们将人工智能融入每项工作的核心，并利用它来增强每个人所能产生的影响。如果你热衷于解决现实问题，并与最优秀的人才一起构思创意，我们邀请你加入我们！
这个职位是远程办公，但距离不会阻碍影响力。我们的混合团队跨地域协作，解决大问题，贴近客户，并共同成长。你将加入一个重视信任、责任和共同成功的文化，你的工作真正有意义。
职位概述
职位概述
这个面向客户的职位要求高级顾问领导并产出网络安全风险管理（CRM）项目的交付成果。你将直接与多位客户及关键利益相关者合作，从管理员到高管，定义并推动安全运营中心（SOC）及更广泛的信息安全部门的安全优先事项，作为值得信赖的顾问，帮助他们实现并保持强大的网络安全态势。
主要职责
- 使用以下框架对AI系统和工具进行全面安全评估：
- MITRE ATLAS用于对抗性战术和技术。
- OWASP Top 10用于LLMs以识别AI/ML模型中的漏洞。
- NIST AI风险管理体系（AI RMF）用于风险分析和缓解。
- 分析模型架构、训练数据流程和部署环境，以识别潜在的安全差距和漏洞。
- 提供关于保护AI系统的专业指导，包括：
- 对抗性机器学习防御。
- 数据污染预防。
- 保护隐私的AI技术（例如，差分隐私）。
- 评估符合监管要求和标准的情况（例如，GDPR、HIPAA或新兴的AI相关法规）。
查看英文原文
Our Mission
At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.
Who We Are
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.Job Summary
Job Summary
This client-facing role requires the Principal Consultant to lead and produce deliverables for cyber risk management (CRM) engagements. You will work directly with multiple customers and key stakeholders, from administrators to the C-suite, to define and drive security priorities for their security operations center (SOC) and broader information security teams, acting as a trusted advisor to help them achieve and maintain a strong cybersecurity posture.
Key Responsibilities
- Conduct comprehensive security assessments of AI systems and tools using frameworks such as:
- MITRE ATLAS for adversarial tactics and techniques.
- OWASP Top 10 for LLMs to identify vulnerabilities in AI/ML models.
- NIST AI Risk Management Framework (AI RMF) for risk analysis and mitigation.
- Analyze model architectures, training data pipelines, and deployment environments to identify potential security gaps and vulnerabilities.
- Provide expert guidance on securing AI systems, including:
- Adversarial ML defenses.
- Data poisoning prevention.
- Privacy-preserving AI techniques (e.g., differential privacy).
- Evaluate compliance with regulatory requirements and standards (e.g., GDPR, HIPAA, or emerging AI-specific regulations).
- Collaborate with the client’s cross-functional teams, conducting stakeholder interviews, interactive workshops, and meetings with technical teams (data scientists, developers, DevOps engineers) and leadership teams to ensure a thorough understanding of system architecture, security requirements, and business objectives for the assessment.
- Stay up-to-date on the evolving threat landscape in AI and contribute to the development of innovative security solutions.Assisting Unit 42 Consulting Leadership in the development of Risk Management, Compliance, and Security standards within professional services
- Maintaining industry knowledge of and experience with cybersecurity best practices within theGovernance, Risk and Compliance (GRC) field to provide recommendations to proactively improve our client’s security posture and maturity
- Maintaining an understanding of Artificial Intelligence (AI) platforms and security best practices as well as threat to foundational, base, and other AI models and tools
- Managing the team, monitoring progress, tracking budget, mitigating risks, and ensuring key stakeholders are kept informed about progress and expected outcomes while defining potential impacts and creating an effective mitigation strategy for multiple projects at a given time
- Identifying security risks and vulnerabilities while eliminating cybersecurity threats via stakeholder interviews, documentation review, and deep-dive testing and control validation
- Effectively communicating with external stakeholders in a professional manner
- Scoping new opportunities with prospective clients, including drafting statements of work and proposals
- Meeting travel requirements as needed to meet business demands (on average ~30%)
Qualifications
Required Qualifications
- Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent years of professional experience to meet job requirements and expectations
- 6-9+ years of experience performing information security and risk assessments based upon industry-accepted standards.
- Experience with GRC tools, technology, and implementation
- Experience with security assessments/audits, drafting findings and recommendations, and prioritizing recommendations via quantitative risk scoring
- Experience with securing AI systems within cloud environments (e.g., AWS, Azure, Google Cloud).
- Experience with the lifecycle management of AI/ML models, including development, deployment, monitoring, and maintenance.
Preferred Qualifications
- Former professional services and consulting experience preferred
- Experience managing a team of consultants
- Strong verbal and written communication skills, particularly in conveying complex technical information to non-technical stakeholders.
- Demonstrate a track record in strengthening existing and developing new client relationships
Compensation Disclosure
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
- /yrOur Commitment
We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at .
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.Originally posted on Himalayas