Data Security Analyst

GovCIO

. Architect, deploy, administer, and optimize Palo Alto Networks next-generation firewalls across data center, campus, branch, cloud, and remote-access environments .

Posted 11/2/2026full-timeRemote • United StatesSeniorLead💰 $125,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in administering Palo Alto Networks next-generation firewalls and centralized management using Palo Alto Panorama, with a strong focus on security policy design, incident response, and network segmentation strategies. Proficient in evaluating emerging technologies and leading complex troubleshooting efforts in cybersecurity environments.

Highest-signal resume keywords

Palo Alto Networks Firewall AdministrationPalo Alto Panorama ManagementPalo Alto Cortex ProductsCisco Networking FundamentalsNIST Cybersecurity Framework

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Firewall AdministrationSecurity Policy DesignIncident ResponseNetwork SegmentationVulnerability ManagementPacket Capture AnalysisAutomation ScriptingThreat PreventionConfiguration AssessmentZero Trust Architecture

Soft Skills

Technical MentorshipStrong Communication Skills

Tools & Technologies

Palo Alto StrataCisco Secure FirewallSIEM PlatformsInfrastructure-as-CodeAWSMicrosoft AzureGoogle Cloud PlatformAnsibleTerraformREST APIs

Certifications & Qualifications

PCNSAPCNSECCNACCNP EnterpriseCCNP SecurityCCIE Enterprise InfrastructureCCIE Security

Industry Keywords

CybersecurityNetwork SecuritySecurity EngineeringSecurity OperationsCompliance StandardsISO 27001PCI DSSHIPAASOXCIS Controls

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityDNSFirewallsGoogle Cloud PlatformPythonSwitchingTCP/IPTerraform

About the role

Key responsibilities & impact

Architect, deploy, administer, and optimize Palo Alto Networks next-generation firewalls across data center, campus, branch, cloud, and remote-access environments
Lead centralized firewall management using Palo Alto Panorama
Design and maintain least-privilege, application-aware security policies and associated security controls
Lead operational use of the Palo Alto Networks Strata portfolio
Deploy and operationalize Cortex capabilities for security analytics, detection, investigation, automation, orchestration, and response
Investigate security alerts, anomalous traffic, malware activity, policy violations, data-exfiltration indicators, and firewall-related incidents
Develop and tune detections, correlation logic, dashboards, investigations, and response playbooks
Build and maintain secure network segmentation strategies, including zone-based architecture and microsegmentation
Partner with Cisco network engineering teams on routing, switching, VPN, wireless, identity, and network-access controls
Support Cisco security technologies and enterprise network services
Review, approve, implement, and document firewall and network-security change requests
Perform firewall rulebase reviews, access recertifications, risk assessments, policy cleanup, and security-control validation
Maintain network security diagrams, data-flow documentation, firewall standards, runbooks, architecture decisions, and escalation procedures
Conduct vulnerability and configuration assessments and validate remediation
Collaborate with Security Operations, Incident Response, Cloud Engineering, Infrastructure, Application Development, GRC, and Audit teams
Provide technical mentorship and lead complex troubleshooting and root-cause analysis
Evaluate emerging technologies, platform features, and threat trends and recommend improvements to the enterprise security roadmap

Requirements

What you’ll need

Bachelor's with 12+ years (or commensurate experience)
10+ years of progressive experience in cybersecurity, network security, security engineering, or security operations, including substantial hands-on firewall administration and incident-response experience
Deep expertise administering Palo Alto Networks next-generation firewalls in complex enterprise environments
Advanced experience with Palo Alto Panorama, including centralized policy administration, device-group design, templates, HA workflows, logging, upgrades, troubleshooting, and configuration governance
Strong practical knowledge of Palo Alto Strata security capabilities, including NGFW architecture, App-ID, User-ID, Content-ID, security profiles, decryption, segmentation, and policy optimization
Strong experience using Palo Alto Cortex products or related XDR/EDR/SOAR/SIEM technologies
Ability to investigate and resolve complex network-security issues using packet captures, firewall traffic logs, threat logs, system logs, routing information, and endpoint telemetry
Strong Cisco networking background, including TCP/IP, DNS, DHCP, NAT, routing, switching, VLANs, VRFs, BGP/OSPF fundamentals, VPNs, network segmentation, and high-availability concepts
Experience supporting Cisco Secure Firewall/Firepower, ASA, ISE, Secure Network Analytics, Catalyst switching, Nexus switching, enterprise routing, and wireless platforms
Thorough understanding of zero trust, least privilege, defense in depth, identity-aware access, network segmentation, threat prevention, encryption, logging, and vulnerability management
Experience with NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, ISO 27001, PCI DSS, HIPAA, SOX, or similar requirements
Strong written and verbal communication skills
Must be able to attain and maintain an AOUSC Public Trust
Master's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (preferred)
Palo Alto Networks certifications such as PCNSA or PCNSE (preferred)
Cisco certifications such as CCNA, CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, or CCIE Security (preferred)
Experience with cloud networking and security in AWS, Microsoft Azure, and/or Google Cloud Platform
Experience with infrastructure-as-code, automation, or scripting using Python, PowerShell, Ansible, Terraform, REST APIs, or Panorama APIs
Experience with SIEM platforms, log pipelines, threat intelligence, vulnerability-management tools, and network detection and response capabilities
Experience leading security projects, technical workstreams, audit remediation, control modernization, or enterprise-wide firewall migrations