> Markdown version of [/jobs/ext/3940150-senior-principal-engineer-security-detections](https://www.wearedevelopers.com/jobs/ext/3940150-senior-principal-engineer-security-detections). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Principal Engineer - Security & Detections

- **Company:** Palo Alto Networks
- **Location:** Palo Alto, CA, United States
- **Experience:** Expert
- **Salary:** $183,600.0 - $297,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Automation of Tests, Cyber Security, Internet Security, Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Packet Analyzer, Open Web Application Security, Parsing, Regular Expressions, Regression Testing, Scripting, Large Language Models, Mitre Att&ck, Deep Learning, Firewalls (Computer Science), Information Technology
- **Published:** October 26, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-principal-engineer-security-detections-palo-alto-ca--303dfc4f-664d-441c-b9b4-6c92b36eee84

## About the Role

Leading Edge Technology, Internet Security, Artificial Intelligence (AI), Problem Solving Skills, Analysis Skills, Regression Testing, Threat Modeling, Test Automation, Process Improvement, Firewalls, * Education & Experience: BS/MS in Computer Science, Cyber Security, or equivalent practical experience with 4+ years of dedicated experience in detection engineering, threat analysis, or security research.

 * Signature Development: Deep expertise in writing and optimizing signature-based patterns.
 * Evasion Defense: Thorough understanding of application-layer evasion techniques.
 * Detection-as-Code: Strong knowledge of the detection-as-code philosophy and building automated testing pipelines for signature validation.

Additional Experience:

 * AI Security Frameworks: Familiarity with AI Risk & Threat signatures and OWASP frameworks (e.g., OWASP Top 10 for LLMs).
 * Scripting & Tooling: Experience with Python, Regex, or other scripting tools to automate packet capture analysis, rule creation, and parsing threat telemetry.
 * Threat Frameworks: Solid understanding of the MITRE ATT&CK framework and translating offensive techniques into robust defensive controls.

## Description

As a Security / Detection Engineer, you will analyze multi-stage attack behavior sequences and translate complex threat patterns into highly deterministic signatures. You will own the end-to-end detection lifecycle-from rule creation to continuous false-positive (FP) tuning-ensuring our defense mechanisms are performant, accurate, and resilient against evasion., * Analyze complex, multi-stage attack behavior sequences and transform them into precise, deterministic signatures.

 * Develop and maintain high-performance signatures that can be safely enforced by our inline engines without impacting network throughput.
 * Own the entire signature lifecycle, from initial research and threat modeling to deployment, automated regression testing, and deprecation.
 * Drive continuous False Positive (FP) tuning and validation processes to minimize alert fatigue while maximizing true positive detection rates.
 * Implement robust version pinning strategies and dependency management for threat prevention content updates, ensuring consistency across distributed firewall deployments.
 * Partner with threat research groups and inline machine learning teams to integrate behavioral signatures with automated deep learning classifiers.