Senior AI Pentest Engineer — Scanning & Automation

Jobs Paloaltonetworks; California; On-site; USD 152,000 - 246,000; Full time

Benefits offered by this job

Flexible work location

Job summary

Palo Alto Networks is seeking a seasoned Security Engineer to help build AI-powered security scanning capabilities that cover web apps, APIs, cloud services, and internet-facing infrastructure. You’ll own scanning tools, develop in-house solutions, and evaluate external options for production use.

You will apply hands-on security testing, automate workflows, and collaborate with engineering teams to deliver reliable findings, reduce false positives, and scale across the enterprise.

Qualifications

• 5-7+ years of Security Engineering experience: Pentesting, Offensive Security, Product Security, or Application Security.
• Strong experience with Penetration testing.
• Experience building tools such as custom scanners, testing frameworks, automation, or meaningful open‑source contributions.
• Strong web/API testing skills plus experience building security services or developer tooling.
• Software engineering experience building vulnerability scanners, DAST, ASM, or automated pentesting products and understand how vulnerabilities work.

Responsibilities

• Own the tooling to continuously scan Palo Alto Networks’ extensive public-facing attack surface within the Information Security team.
• Design and develop black‑box scanning capabilities that discover and validate vulnerabilities across web applications, APIs, cloud services, and internet‑facing infrastructure.
• Build AI agents that use security tools, analyze target context, and adapt testing approaches.
• Take capabilities from prototype to production, developing in‑house tools or evaluating, acquiring, and operating commercial solutions as needed.

Skills

Security Engineering

Penetration Testing

Web/API Testing

Tooling Development

Automation

Tools

Custom Scanners

Testing Frameworks

Automation Tools

Job description

Palo Alto Networks is seeking a seasoned Security Engineer to help build AI-powered security scanning capabilities that cover web apps, APIs, cloud services, and internet-facing infrastructure. You’ll own scanning tools, develop in-house solutions, and evaluate external options for production use.

You will apply hands-on security testing, automate workflows, and collaborate with engineering teams to deliver reliable findings, reduce false positives, and scale across the enterprise.