Palo Alto Networks
Principal Infosec Engineer- Product Security Incident Response
$170K–$275K
Office - USA - CA - Headquarters · No · Principal · Full-time · Posted Oct 19, 2026
- Experience
- 10+ years of dedicated experience in product security, application security, vulnerability research, or offensive security.
- Education
- BS or MS Degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.
- Visa sponsorship
- Immigration sponsorship: Yes
About the job
Leads complex product vulnerability investigations and response, develops PSIRT automation and risk methods, and guides remediation and disclosure across Palo Alto Networks.
What you'll do
- Lead vulnerability analysis, variant hunting, root-cause investigations, and technical validation of product fixes.
- Define PSIRT automation, telemetry, and risk-scoring approaches; coordinate response strategies and disclosures with internal and external stakeholders.
- Prepare security reports, CVE submissions, and advisories, and mentor senior and staff engineers.
What they ask for
- 10+ years of dedicated experience in product security, application security, vulnerability research, or offensive security.
- Demonstrated ability to analyze, reproduce, and safely write proof-of-concept exploits for complex vulnerabilities.
- Expert-level mastery of CVSS, CWE, CVE, and risk-prioritization frameworks such as EPSS and SSVC.
- Expert scripting skills in Python, Go, or PowerShell.
Pay
$170,000.00 - $275,000.00/yr (USD, base salary)
Tools
CVSS, CWE, CVE, EPSS, SSVC, Python, Go, PowerShell
AI focus
Use AI, machine learning, or Generative AI/LLM frameworks to scale vulnerability triage, automate deep-dive code analysis, and design defensive workflows.
Model-written summary · the original posting is authoritative