Palo Alto Networks
Senior Staff Penetration Testing Engineer
$152K–$246K
Office - USA - CA - Headquarters · No · Senior Staff · Full-time · Posted Oct 23, 2026
- Experience
- Bachelor's degree with 5+ years of experience, or Master's degree with 3+ years of experience in penetration testing, offensive security, or a related field.
- Education
- Bachelor's degree or Master's degree.
- Visa sponsorship
- No immigration sponsorship; applicants for work visas will not be sponsored.
About the job
Conducts penetration tests and assumed-breach red team operations across cloud applications and infrastructure, using AI-assisted methods and advising engineering teams on security.
What you'll do
- Test cloud-native applications, infrastructure, networks, tenant isolation, and segmentation; identify and document vulnerabilities.
- Plan and lead red team operations, and develop custom automation for offensive security testing.
- Advise engineering teams on remediation and secure design; report findings and mentor junior team members.
What they ask for
- Bachelor's degree with 5+ years of relevant experience, or Master's degree with 3+ years.
- Experience conducting penetration tests across cloud-native applications and large-scale infrastructure.
- Ability to lead assumed-breach red team operations, including lateral movement and privilege escalation.
- Proficiency exploiting vulnerabilities in cloud services and container orchestration platforms, and developing testing tools or scripts.
Nice to have
- Experience integrating AI-assisted testing frameworks and LLM-driven automation.
- Understanding of FedRAMP attack vectors and compliance testing.
Pay
$152,300.00 - $246,400.00/yr (USD; base salary)
Tools
cloud-native applications, cloud services, container orchestration platforms, automated deployment pipelines, AI-assisted testing frameworks, LLM-driven automation
AI focus
Integrate AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows to accelerate threat discovery.
Model-written summary · the original posting is authoritative