Lead SaaS Agent Security Engineer

Palo Alto Networks, Inc.; Santa Clara (CA); On-site; USD 156,000 - 253,000; Full time

Job summary

Palo Alto Networks in Santa Clara, CA is seeking an information security specialist focused on agentic AI security, SaaS security, and cloud defenses. You will design controls for autonomous AI agents, secure OAuth, and monitor SaaS risk.

Collaboration with SRE, AI/ML research, product, and compliance teams to bake guardrails into CI/CD pipelines; 5+ years in security required; CISSP/CCSP preferred.

Qualifications

• 5+ years in information security, cloud security engineering, or application security.
• AI & agent threats: understanding of agentic AI risks, prompt/indirect injection, OAuth abuse, privilege escalation, data leakage across LLM/agent stacks.
• SaaS architecture: strong grasp of enterprise SaaS platforms (Salesforce, M365, Google Workspace, ServiceNow) and SSPM.
• Scripting & automation: proficiency in Java preferred; Next Python, Go, or Bash for building security automation and API integrations.
• Cloud provider: GCP basics and ability to configure GCP, understand BigQuery and work on GCP Console.
• Certifications (preferred): CISSP, CCSP, or cloud-native security credentials.

Responsibilities

• Architect security controls for autonomous AI agents, including sandboxing and runtime policy enforcement.
• Deploy, integrate, and operationalize SaaS agent security and data security to monitor risk.
• Secure OAuth flows, OpenID Connect (OIDC), SAML/SSO, API token privileges, and agent-to-SaaS authorization models.
• Build production-grade security tooling, telemetry collection, and incident response playbooks for agent/SaaS anomalies.
• Partner with SRE, AI/ML research, product, and compliance teams to bake guardrails into CI/CD and deployment pipelines.

Skills

5+ years information security

AI & agent threats

SaaS architecture

Scripting & automation

Cloud provider: GCP basics

Tools

Java

Python

Go

Bash

Job description

Palo Alto Networks in Santa Clara, CA is seeking an information security specialist focused on agentic AI security, SaaS security, and cloud defenses. You will design controls for autonomous AI agents, secure OAuth, and monitor SaaS risk.

Collaboration with SRE, AI/ML research, product, and compliance teams to bake guardrails into CI/CD pipelines; 5+ years in security required; CISSP/CCSP preferred.