Principal AI & SaaS Agent Security Engineer

Palo Alto Networks; California; Hybrid; USD 156,000 - 253,000; Full time

Benefits offered by this job

Health insurance

Job summary

Palo Alto Networks is seeking a security-focused architect to design defenses for agentic AI workflows, manage SaaS-to-SaaS connections, and enforce strong access controls. You will implement runtime protections, telemetry, and incident response playbooks to safeguard enterprise environments.

Join a team that collaborates with SRE, AI/ML research, product, and compliance to embed guardrails into CI/CD pipelines, ensuring robust security across cloud native deployments.

Qualifications

• 5+ years in information security, cloud security engineering, or application security.
• Deep understanding of agentic AI risks, prompt/indirect injection, OAuth abuse, privilege escalation, and data leakage across LLM/agent stacks.
• Strong grasp of enterprise SaaS platforms and SSPM platforms.
• Proficiency in Java preferred; Python, Go, or Bash for security automation and API integrations.
• GCP basics and ability to configure GCP, understand BigQuery.

Responsibilities

• Architect security controls for autonomous AI agents, including sandboxing and runtime policy enforcement.
• Deploy, integrate, and monitor SaaS agent security and data security across third-party and internal SaaS.
• Secure OAuth flows, OpenID Connect, SAML/SSO, and API token privileges.
• Build production-grade security tooling, telemetry collection, and incident response playbooks.
• Collaborate with SRE, AI/ML research, product, and compliance teams to bake guardrails into CI/CD.

Skills

AI & Agent Threats

SaaS Security

Scripting & Automation

Cloud Security

OAuth / SSO / IAM

Tools

Salesforce

Google Workspace

SSPM platforms

GCP

Job description

Palo Alto Networks is seeking a security-focused architect to design defenses for agentic AI workflows, manage SaaS-to-SaaS connections, and enforce strong access controls. You will implement runtime protections, telemetry, and incident response playbooks to safeguard enterprise environments.

Join a team that collaborates with SRE, AI/ML research, product, and compliance to embed guardrails into CI/CD pipelines, ensuring robust security across cloud native deployments.