Senior Enterprise AI Security Engineer

Build enterprise-grade security controls for AI adoption across the organization.

• Lead discovery, inventory, and visibility for enterprise AI usage, tracking approved AI systems, third-party SaaS tools, open-source models, developer plugins, and shadow AI integrations.
• Architect, build, and maintain automated remediation workflows and policy enforcement engines to mitigate AI risks without reducing engineering or business velocity.
• Design and deploy threat mitigation controls for AI-specific vulnerabilities
  , including direct and indirect prompt injection, jail breaking, training data poisoning, and insecure output handling.
• Partner with the Enterprise Data Protection team to design context-aware DLP controls that prevent unauthorized data ingestion or leakage into AI model pipelines.
• Assess AI applications, agents, and integrations, including MCP servers and tool connectors, plus third-party AI products.
• Research and implement emerging AI security frameworks and tooling, such as OWASP Top 10 for LLMs
  , MITRE ATLAS
  , and NIST AI RMF
  .
• Collaborate with cloud, infrastructure, and application security teams to review, document, and harden model hosting environments, AI workloads, and API gateways
  .

• Bachelor's or Master's degree in Computer Science, Computer Engineering, Cybersecurity, or a related STEM field, or equivalent practical experience.
• 5+ years of hands-on experience in enterprise security engineering, application security, cloud security, or security architecture.
• Proven expertise in AI/ML security risks
  , including prompt injection, model evasion, data poisoning, insecure model supply chains, and LLM application vulnerabilities.
• Experience implementing AI guardrails
  , including sensitive data and secrets detection, prompt-injection defenses, and tool-call policies across AI assistants, coding agents, and internally built agents.
• Experience building automated detection and remediation workflows
  .
• Strong knowledge of core enterprise security domains:
  Identity & Access Management
  , Cloud Infrastructure (AWS, GCP, or Azure),
  endpoint security
  , and Data Protection/DLP
  .
• Proficiency in at least one modern programming or scripting language, such as Python or Go
  , for automation, API integrations, and custom security tooling.
• Strong communication and cross-functional leadership skills, with a track record of enabling business and engineering teams to adopt new technologies safely.

• Python
• Go
• AWS
• GCP
• Azure
• OWASP Top 10 for LLMs
• MITRE ATLAS
• NIST AI RMF
• MCP

• Relevant cloud or security certifications, such as AWS Solutions Architect, Google Cloud Certified - Associate, CCSP, or PCNSE.

• Santa Clara, CA (onsite)

• Annual base salary range:
  USD 129,
• Compensation may include restricted stock units and a bonus

• Immigration sponsorship: No. Palo Alto Networks will not sponsor applicants for work visas for this position.