10 hours ago
Sunnyvale, CA, USAStaff+
Base Salary
$200k - $310k/yr
Responsibilities
- Own end-to-end testing and release qualification across discovery, attack planning, execution, reporting, remediation verification, UI, APIs, agents, and backend services.
- Build controlled security labs and verify exploit evidence, false positives and negatives, severity, and remediation guidance.
- Evaluate AI planning, tool use, repeatability, model failures, prompt-injection resistance, and regressions from model, prompt, and tool changes.
- Validate assessment safety controls, SaaS tenant isolation, provisioning, permissions, usage metering, licensing, on-premises deployment, upgrades, rollback, and restricted connectivity.
- Assess performance, scaling, recovery, concurrent assessments, service failures, network interruptions, result integrity, and resume behavior.
- Build automated API and system testing, CI/CD regression suites, testbed provisioning, reset workflows, and evidence collection.
- Partner with Engineering, Product Management, and Operations on defects and release gating, guide test reviews, and mentor QA engineers.
Requirements
- 8+ years of experience in software QA, test automation, or security engineering, including ownership of test strategy and release qualification for complex products.
- Hands-on penetration testing experience with the ability to reproduce vulnerabilities and independently verify findings.
- Experience testing SaaS and on-premises products, including multi-tenancy, deployment, upgrades, and failure recovery.
- Strong Python or equivalent programming skills and experience building API and system test automation.
- Knowledge of networking, Linux, Windows, authentication, authorization, distributed-service troubleshooting, logs, metrics, and network captures.
- Experience with a major cloud platform, Docker, Kubernetes, and performance or load testing.
- Working knowledge of LLMs and autonomous agents, including tool calling and evaluation of variable outputs.
- Experience or familiarity with autonomous pentesting, vulnerability management, security validation products, Fortinet ecosystem, Active Directory, cloud IAM, MITRE ATT&CK, OWASP testing methods, Burp Suite, Nmap, Metasploit, or BloodHound is preferred.
- Experience with AI evaluation datasets, adversarial testing, infrastructure as code, or automated security labs is preferred.
- OSCP, OSWE, GPEN, or comparable offensive security expertise is preferred.
- Must be able to work in the US without sponsorship.
Benefits
- Medical, dental, vision, life, and disability insurance.
- 401(k), 11 paid holidays, vacation time, sick time, and a comprehensive leave program.
- Eligibility for Fortinet’s equity program and discretionary bonus eligibility.
About Fortinet
Fortinet is a public cybersecurity company that builds network security hardware and software for enterprises, service providers, and governments. Its FortiGate firewalls, secure networking (SD-WAN), endpoint and cloud security, and threat intelligence subscriptions are sold via direct and channel partners. Founded in 2000 and headquartered in Sunnyvale, California, Fortinet trades on NASDAQ (FTNT) and serves more than 660,000 customers worldwide.