> Markdown version of [/jobs/ext/3054870-staff-continuous-ai-pentester](https://www.wearedevelopers.com/jobs/ext/3054870-staff-continuous-ai-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Continuous AI Pentester

- **Company:** Palo Alto Networks
- **Location:** United States
- **Experience:** Expert
- **Salary:** $152,300.0 - $246,400.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Cyber Security, Programming Tools, Cloud Services, Software Engineering, Web Applications, Software Security, Palo Alto Networks, Free and Open-Source Software, Api Management, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** September 24, 2026
- **Apply:** https://startup.jobs/senior-staff-continuous-ai-pentester-paloaltonetworks-com-8778853

## About the Role

* 5-7+ years of Security Engineering experience: Pentesting, Offensive Security, Product Security, or Application Security
 * Strong experience with Penetration testing
 * Experience building tools such as custom scanners, testing frameworks, automation, or meaningful open-source contributions
 * Strong web/API testing skills plus experience building security services or developer tooling
 * Software engineering experience building vulnerability scanners, DAST, ASM, or automated pentesting products and understand how vulnerabilities work.

## Description

* Own the tooling to continuously scan Palo Alto Networks' extensive public-facing attack surface within the Information Security team.
 * Design and develop black-box scanning capabilities that discover and validate vulnerabilities across web applications, APIs, cloud services, and internet-facing infrastructure.
 * Build AI agents that use security tools, analyze target context, and adapt testing approaches.
 * Take capabilities from prototype to production, developing in-house tools or evaluating, acquiring, and operating commercial solutions as needed.

Combine Security Testing with Software Engineering

 * Perform hands-on security testing to understand vulnerabilities and translate effective techniques into reusable tools and automated workflows.
 * Combine established security tools with custom detection logic to investigate application weaknesses, misconfigurations, and attack paths.
 * Develop validation workflows that reduce false positives and produce reproducible evidence.

Improve Scanning Quality and Scale

 * Build and improve services for scan scheduling, tool execution, and results processing at enterprise scale.
 * Apply expertise in frontier AI models to select and evaluate models that balance capability, accuracy, performance, and cost.
 * Evaluate detection accuracy, coverage, and agent performance to improve scanning effectiveness.
 * Implement controls for authorized scope and safe execution, while improving reliability and cost efficiency.

Help Teams Resolve Validated Findings

 * Produce actionable findings with clear evidence, affected assets, and remediation guidance.
 * Integrate findings into internal security and engineering workflows, including automated retesting to verify fixes.
 * Partner with security researchers, analysts, and engineering teams to prioritize capabilities based on emerging threats and enterprise security needs.