Principal AI Security Engineer - Agentic Defense & SaaS

Palo Alto Networks; California; On-site; USD 156,000 - 253,000; Full time

Job summary

Palo Alto Networks is a leading cybersecurity company hiring a Senior Security Architect in California to architect defenses for agentic AI workflows, monitor integrations, and govern secure SaaS-to-SaaS connections. The role focuses on safeguarding agent security such as OAuth, SSO, and data protection across enterprise environments.

The position collaborates with SRE, AI/ML research, product, and compliance teams to implement guardrails in CI/CD and deployment pipelines, ensuring robust

Qualifications

• 8+ years in information security, cloud security engineering, or application security.
• Deep understanding of agentic AI risks, prompt/indirect injection, OAuth abuse, privilege escalation, and data leakage across LLM/agent stacks.
• SaaS platforms (e.g., Salesforce, M365, Google Workspace, ServiceNow) and SSPM familiarity.
• Proficiency in Java; Python, Go, or Bash for security automation and API integrations.
• GCP basics with ability to configure GCP and use BigQuery.
• Certifications such as CISSP or CCSP are preferred.

Responsibilities

• Architect security controls for autonomous AI agents, runtime defense, and governance.
• Deploy, integrate, and operationalize SaaS agent security and data protection.
• Secure identity and non-human access including OAuth, OIDC, and SSO.
• Develop production-grade security tooling, telemetry, and incident response playbooks.
• Collaborate with SRE, AI/ML research, product, and compliance to bake guardrails into CI/CD and deployment pipelines.

Skills

AI & Agent Threats

SaaS Architecture

Scripting & Automation

OAuth / OIDC / SAML

Java

Python/Go/Bash

Tools

Salesforce

M365

Google Workspace

ServiceNow

Job description

Palo Alto Networks is a leading cybersecurity company hiring a Senior Security Architect in California to architect defenses for agentic AI workflows, monitor integrations, and govern secure SaaS-to-SaaS connections. The role focuses on safeguarding agent security such as OAuth, SSO, and data protection across enterprise environments.

The position collaborates with SRE, AI/ML research, product, and compliance teams to implement guardrails in CI/CD and deployment pipelines, ensuring robust