Senior Principal AI-Driven Security Detection Engineer

Jobs Paloaltonetworks; California (MO); On-site; USD 184,000 - 297,000; Full time

Job summary

Palo Alto Networks in the United States is seeking a Security / Detection Engineer to analyze multi-stage attack behavior and translate complex threat patterns into deterministic signatures. You will own the end-to-end detection lifecycle from rule creation to regression testing, ensuring defense mechanisms stay performant and resilient against evasion.

The role requires 4+ years in detection engineering, deep signature development experience, and familiarity with MITRE ATT&CK.

Qualifications

• BS/MS in CS or Cyber Security with 4+ years in detection engineering.
• Deep expertise in writing and optimizing signature-based patterns.
• Thorough understanding of application-layer evasion techniques.
• Experience with detecting threats using automated testing pipelines.

Responsibilities

• Analyze multi-stage attack sequences and create precise signatures.
• Develop/maintain high-performance signatures for inline engines.
• Own signature lifecycle from research to deployment and testing.
• Tune false positives to maximize true positive detection rates.
• Coordinate with threat research groups and ML teams on behavioral signatures.

Skills

Threat analysis

Signature development

Evasion techniques

Detection-as-code

Threat modeling

Automated testing

Education

BS/MS in Computer Science or Cyber Security

Tools

Python

Regex

Job description

Palo Alto Networks in the United States is seeking a Security / Detection Engineer to analyze multi-stage attack behavior and translate complex threat patterns into deterministic signatures. You will own the end-to-end detection lifecycle from rule creation to regression testing, ensuring defense mechanisms stay performant and resilient against evasion.

The role requires 4+ years in detection engineering, deep signature development experience, and familiarity with MITRE ATT&CK.