Principal Software Engineer (SaaS Agent Security)
Palo Alto Networks28 days ago
Base Salary
$156k - $253k/yr
Responsibilities
- Architect runtime defenses for autonomous AI agents, including sandboxing, policy enforcement, and execution-safety monitoring.
- Deploy, integrate, and operationalize SaaS agent-security and data-security capabilities to monitor third-party and internal SaaS risk.
- Secure OAuth flows, OpenID Connect, SAML/SSO, API-token privileges, and agent-to-SaaS authorization models.
- Build production-grade security tooling, automated telemetry collection, and incident-response playbooks for agent and SaaS anomalies.
- Partner with SRE, AI/ML research, product, and compliance teams to embed guardrails into deployment pipelines.
Requirements
- At least 5 years of experience in information security, cloud security engineering, or application security.
- Deep understanding of agentic AI risks, prompt and indirect injection, OAuth abuse, privilege escalation, and data leakage across LLM and agent stacks.
- Strong understanding of enterprise SaaS platforms such as Salesforce, Microsoft 365, Google Workspace, and ServiceNow, as well as SSPM platforms.
- Proficiency in Java is preferred, with Python, Go, or Bash experience for security automation and API integrations.
- GCP experience, including configuring GCP, understanding BigQuery, and working in the GCP Console.
- Preferred certifications include CISSP, CCSP, or cloud-native security credentials.
Benefits
- Most teams work from the office full time, with flexibility when needed.
- Employee benefits are available through the company benefits program.
- The role is eligible for immigration sponsorship.
Tech Stack
Categories
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.