Senior AI-Driven Security Pentester

Palo Alto Networks, Inc.; Santa Clara (CA); On-site; USD 152,000 - 246,000; Full time

Benefits offered by this job

FLEXWORK program

Job summary

Palo Alto Networks, Inc. is seeking a Security Engineer to advance our offensive security program. You will drive pentesting efforts, build and scale scanners, and develop custom tooling to identify vulnerabilities across web applications, APIs, and cloud services.

You’ll collaborate with researchers, analysts, and engineering teams to prioritize findings and integrate validated results into secure development workflows, balancing accuracy, speed, and risk for enterprise-scale environments.

Qualifications

• 5-7+ years of Security Engineering experience: Pentesting, Offensive Security, Product Security, or Application Security.
• Strong experience with Penetration testing.
• Experience building tools such as custom scanners, testing frameworks, automation, or meaningful open-source contributions.
• Strong web/API testing skills plus experience building security services or developer tooling.
• Software engineering experience building vulnerability scanners, DAST, ASM, or automated pentesting products and understand how vulnerabilities work.

Responsibilities

• Own the tooling to continuously scan Palo Alto Networks’ extensive public-facing attack surface within the Information Security team.
• Design and develop black-box scanning capabilities that discover and validate vulnerabilities across web applications, APIs, cloud services, and internet-facing infrastructure.
• Build AI agents that use security tools, analyze target context, and adapt testing approaches.

Skills

Pentesting

Offensive Security

Product Security

Application Security

Penetration testing

Tools

Custom scanners

Testing frameworks

Automation

Open-source contributions

Job description

Palo Alto Networks, Inc. is seeking a Security Engineer to advance our offensive security program. You will drive pentesting efforts, build and scale scanners, and develop custom tooling to identify vulnerabilities across web applications, APIs, and cloud services.

You’ll collaborate with researchers, analysts, and engineering teams to prioritize findings and integrate validated results into secure development workflows, balancing accuracy, speed, and risk for enterprise-scale environments.