Principal Engineer - Security & Detections (Prisma AIRS)
Palo Alto Networks · Posted Sep 21, 2026
- Santa Clara, California, United States
- Hybrid
- Full-time · Principal
- $156K–$253K per year
- 8+ years
- Visa sponsorship
Joining the AIRS Team to build brand-new initiatives focused on advancing state-of-the-art AI/ML infrastructure and high-performance, distributed backend systems. The role involves analyzing multi-stage attack behavior sequences and translating them into deterministic signatures, while owning the end-to-end detection lifecycle.
Compensation
$156,400.00 - $253,000.00/yr
Responsibilities
- Analyze complex, multi-stage attack behavior sequences and transform them into precise, deterministic signatures.
- Develop and maintain high-performance signatures that can be safely enforced by our inline engines without impacting network throughput.
- Own the entire signature lifecycle, from initial research and threat modeling to deployment, automated regression testing, and deprecation.
- Drive continuous False Positive (FP) tuning and validation processes to minimize alert fatigue while maximizing true positive detection rates.
- Implement robust version pinning strategies and dependency management for threat prevention content updates, ensuring consistency across distributed firewall deployments.
Requirements
- BS/MS in Computer Science
- Cyber Security
- equivalent practical experience
- Nice to have: AI Security Frameworks
- Nice to have: AI Risk & Threat signatures