Sr. Staff Engineer (Product Security Incident Response)

Job Summary

The Team Information Security - We're not your ordinary Information Security team. We're a diverse group of security professionals who challenge the status quo in order to protect Palo Alto Networks and our customers. Driving innovation on the Information Security team of the fastest-growing high-tech cybersecurity company is a once-in-a-lifetime opportunity. You'll be joined by the brightest minds in technology, and our global teams are on the front line of defense against cyberattacks.

Key Responsibilities

• Lead the technical investigation of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS).
• Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations.
• Proactively collaborate and ensure alignment with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies.
• Engage with customers, security researchers, and industry partners to discuss vulnerability details, mitigation steps, and disclosure timelines.
• Maintain deep familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST.
• Contribute to the continuous improvement of PSIRT workflows, automation, and tooling to simplify and accelerate vulnerability response.
• Mentor junior engineers in vulnerability research, triage, and incident response methodologies, empowering others to develop their skills.

Qualifications

• BS or MS Degree in Computer Science, Engineering, or Cybersecurity.
• 4+ years of experience in product security, application security, or vulnerability research.
• Strong expertise in reverse engineering, debugging, and secure software development practices.
• Demonstrated ability to reproduce, analyze, and assess the exploitability of complex vulnerabilities in large-scale systems.
• Deep familiarity with CVSS, CVE, and public vulnerability databases.

Preferred Qualifications

• Experience handling responsible disclosure and coordinating with external researchers and industry partners.
• Strong written and verbal communication skills, with an ability to articulate technical risk to diverse audiences.
• Experience working in a fast-paced, collaborative environment with strict SLAs for vulnerability response.

Compensation

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. $151,500.00 - $245,025.00/yr

Our Commitment

We're trailblazers that dream big, take risks, and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Is Role Eligible for Immigration Sponsorship?

Yes