Palo Alto Networks
Principal Security Researcher (Decoder)
$172K–$278K
Santa Clara, United States of America · No · Principal · Full-time · Posted Sep 15, 2026
- Experience
- 5+ years industry experience
- Education
- BS/MS in Computer Science or Electrical Engineering or equivalent Military experience.
- Visa sponsorship
- Immigration sponsorship: Yes
About the job
Develop protocol and file decoders, traffic inspection capabilities, and shared security services for the Intrusion Prevention System in Palo Alto Networks’ next-generation firewall.
What you'll do
- Research network protocols, application behavior, file types, and firewall evasion techniques; develop corresponding decoders and defenses.
- Build common services and internal tools supporting network security products.
- Integrate detection and advanced cybersecurity features into product solutions in collaboration with other teams.
What they ask for
- Strong programming and debugging skills, including required Go coding experience and understanding of Go concurrency, memory optimization, and scalable system design.
- Excellent understanding of L4-7 networking protocols and experience with packet processing, stream reassembly, protocol parsing, and traffic analysis systems.
- Experience analyzing network traffic with tools such as Wireshark, Fiddler, or tcpdump; familiarity with Linux/Unix development.
- BS/MS in Computer Science or Electrical Engineering, or equivalent Military experience.
Nice to have
- C/C++ experience; knowledge of next-generation firewalls, cybersecurity services, protocol evasion, fragmentation, and traffic obfuscation.
- Experience with Suricata, Zeek, eBPF, DPDK, pattern-matching or rule-based detection, profiling tools, or AI for traffic classification, protocol identification, or anomaly detection.
Pay
$172,100.00 - $278,300.00/yr (USD; base salary)
Tools
Go, C/C++, HTTP, TLS, SMTP, FTP, Websocket, GRPC
AI focus
AI techniques for traffic classification, protocol identification, or anomaly detection are a preferred area of experience.
Model-written summary · the original posting is authoritative