> Markdown version of [/jobs/ext/3787304-principal-software-engineer-saas-agent-security](https://www.wearedevelopers.com/jobs/ext/3787304-principal-software-engineer-saas-agent-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Software Engineer (SaaS Agent Security

- **Company:** Palo Alto Networks
- **Location:** United States
- **Experience:** Expert
- **Salary:** $156,400.0 - $253,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Information Leak Prevention, Data Security, Cursor, Python (Programming Language), Machine Learning, OAuth, OpenID, Openid Connect, Salesforce.Com, Security Assertion Markup Language (SAML), Office365, Delivery Pipeline, Large Language Models, Claude Code, Software Security, Agentic-AI, Gsuite, Api Management, Servicenow
- **Published:** October 16, 2026
- **Apply:** https://startup.jobs/principal-software-engineer-saas-agent-security-paloaltonetworks-com-10477949

## About the Role

Technical Experience:

 * 5+ years in information security, cloud security engineering, or application security.
 * AI & Agent Threats: Deep understanding of agentic AI risks, prompt/indirect injection, OAuth abuse, privilege escalation, and data leakage across LLM/agent stacks.
 * SaaS Architecture: Strong grasp of enterprise SaaS platforms (e.g., Salesforce, M365, Google Workspace, ServiceNow) and SSPM platforms.
 * Scripting & Automation: Proficiency in Java preffered. Next - Python, Go, or Bash for building security automation and API integrations.
 * Cloud Provider: GCP basics and ability to configure GCP, understand BQ and work on GCP Console.
 * Certifications (Preferred): CISSP, CCSP, or cloud-native security credentials.

## Description

Architecting defenses, building monitoring pipelines, and managing governance for agentic AI workflows, API permissions, and enterprise SaaS-to-SaaS or agent-to-SaaS connections. Specialize in coding agent security such as Claude code, Codex and Cursor., Agentic AI & Runtime Defense: Architect security controls for autonomous AI agents, including sandboxing, runtime policy enforcement, and execution safety monitoring.
SaaS & API Security Posture: Deploy, integrate, and operationalize SaaS agent security and data security to monitor third-party and internal SaaS risk.
Identity & Non-Human Access: Secure OAuth flows, OpenID Connect (OIDC), SAML/SSO, API token privileges, and agent-to-SaaS authorization models.
Detection & Incident Response: Build production-grade security tooling, automated telemetry collection, and incident response playbooks for agent/SaaS anomalies.
Cross-Functional Collaboration: Partner with SRE, AI/ML research, product, and compliance teams to bake guardrails into CI/CD and deployment pipelines.