Palo Alto Networks
Principal Software Engineer (SaaS Agent Security)
$156K–$253K
Office - USA - CA - Headquarters · No · Principal · Full-time · Posted Oct 15, 2026
- Experience
- 5+ years
- Visa sponsorship
- Immigration sponsorship: Yes
About the job
Architect security controls, monitoring, and governance for agentic AI workflows and enterprise SaaS integrations.
What you'll do
- Build agent runtime defenses, including sandboxing, policy enforcement, and execution monitoring.
- Deploy SaaS and data security integrations; secure identities, API permissions, and agent-to-SaaS access.
- Develop security automation, telemetry, and incident response playbooks, and collaborate on CI/CD guardrails.
What they ask for
- 5+ years in information security, cloud security engineering, or application security.
- Deep understanding of agentic AI risks, including prompt or indirect injection, OAuth abuse, privilege escalation, and data leakage.
- Strong grasp of enterprise SaaS platforms and SSPM platforms.
- GCP basics, including configuring GCP and working with BQ and GCP Console.
Nice to have
- Proficiency in Java preferred; Python, Go, or Bash are alternatives.
- CISSP, CCSP, or cloud-native security credentials.
Pay
$156,400.00 - $253,000.00/yr (USD, base salary)
Tools
Claude code, Codex, Cursor, Java, Python, Go, Bash, GCP
AI focus
Secures autonomous AI agents and coding agents through runtime defenses, security monitoring, governance, and controls for agent-to-SaaS access.
Model-written summary · the original posting is authoritative