Drimva

Palo Alto Networks

Principal Consultant, Offensive Security, Proactive Services (Unit 42)

$151K–$208K

Burbank, United States of America · Yes · Principal · Full-time · Posted Oct 28, 2026

Experience
6+ years of professional information security experience, with a focus on penetration testing and vulnerability assessments.
Education
Bachelor’s Degree in Information Security, Computer Science, or a related field, or equivalent professional experience.
Visa sponsorship
No work visa sponsorship.

About the job

Leads offensive security engagements, testing client systems for vulnerabilities and delivering risk assessments and actionable remediation recommendations.

What you'll do

  • Conduct penetration tests across network, web, cloud, and mobile environments; perform threat hunting and compromise assessments.
  • Develop scripts, tools, and methodologies; lead client engagements and communicate findings to technical and executive audiences.
  • Produce client reports and risk assessments using industry frameworks; help scope opportunities and support offensive security research.

What they ask for

  • Bachelor’s Degree in Information Security, Computer Science, or a related field, or equivalent professional experience.
  • 6+ years of professional experience in information security, focused on penetration testing and vulnerability assessments.
  • Expertise with Metasploit, Burp Suite Pro, Cobalt Strike, Nessus, and Bloodhound.
  • Scripting or programming proficiency and penetration testing experience across Windows, Linux, and cloud platforms (AWS, GCP, Azure).

Nice to have

  • Experience managing or mentoring junior consultants; certifications such as OSCP, OSCE, GPEN, GWAPT, or GXPN.
  • Public speaking, publishing research, security-community contributions, or knowledge of computer forensics and incident response.

Pay

$151,000.00 - $208,000.00/yr (base salary)

Tools

Metasploit, Burp Suite Pro, Cobalt Strike, Nessus, Bloodhound, Python, PowerShell, Ruby

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 6, 2026 (UTC)