> Markdown version of [/jobs/ext/2021504-staff-engineer-product-security-incident-response](https://www.wearedevelopers.com/jobs/ext/2021504-staff-engineer-product-security-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Engineer (Product Security Incident Response - **Company:** Palo Alto Networks - **Location:** United States - **Experience:** Expert - **Salary:** $151,500.0 - $245,025.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Databases, Data Security, Software Debugging, Internet Security, Reverse Engineering, Software Engineering, Software Security, Information Technology, Palo Alto Networks, Vulnerability Analysis - **Published:** August 11, 2026 - **Apply:** https://www.careerbuilder.com/job-details/sr-staff-engineer-product-security-incident-response--62df038d-97fe-41c2-83ea-6867ceeb89a7 ## About the Role * BS or MS Degree in Computer Science, Engineering, or Cybersecurity. * 4+ years of experience in product security, application security, or vulnerability research. * Strong expertise in reverse engineering, debugging, and secure software development practices. * Demonstrated ability to reproduce, analyze, and assess the exploitability of complex vulnerabilities in large-scale systems. * Deep familiarity with CVSS, CVE, and public vulnerability databases. Preferred Qualifications * Experience handling responsible disclosure and coordinating with external researchers and industry partners. * Strong written and verbal communication skills, with an ability to articulate technical risk to diverse audiences. * Experience working in a fast-paced, collaborative environment with strict SLAs for vulnerability response., Analysis Skills, Applications Security, Artificial Intelligence (AI), Automation, Communication Skills, Computer Science, Computer Security, Continuous Improvement, Cross-Functional, Debugging Tools, Employee Benefits, High Tech Industry, Incident Response, Industry Standards, Information/Data Security (InfoSec), Internet Security, Investigative Reports, Large-Scale Systems, Leading Edge Technology, Legal, Machine Tool, Mentoring, Presentation/Verbal Skills, Problem Solving Skills, Product Engineering, Reverse Engineering, Risk, Root Cause Analysis, Service Level Agreement (SLA), Software Development, Team Player, Technical Analysis, U.S. National Institute of Standards and Technology (NIST), Writing Skills ## Description As a Senior Staff PSIRT Engineer, you will play a critical role in protecting Palo Alto Networks products and services by leading complex vulnerability investigations. You will serve as a senior technical expert in the Product Security Incident Response Team (PSIRT), driving deep technical analysis, root cause determination, and remediation guidance. This role demands a high level of technical acumen and cross-functional collaboration to navigate sensitive situations with both internal teams and external stakeholders., * Lead the technical investigation of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS). * Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations. * Proactively collaborate and ensure alignment with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies. * Engage with customers, security researchers, and industry partners to discuss vulnerability details, mitigation steps, and disclosure timelines. * Maintain deep familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST. * Contribute to the continuous improvement of PSIRT workflows, automation, and tooling to simplify and accelerate vulnerability response. * Mentor junior engineers in vulnerability research, triage, and incident response methodologies, empowering others to develop their skills. ## Related Videos - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)