Build enterprise-grade security controls for AI adoption across the organization.

Lead discovery, inventory, and visibility for enterprise AI usage, tracking approved AI systems, third-party SaaS tools, open-source models, developer plugins, and shadow AI integrations.
Architect, build, and maintain automated remediation workflows and policy enforcement engines to mitigate AI risks without reducing engineering or business velocity.
Design and deploy threat mitigation controls for AI-specific vulnerabilities, including direct and indirect prompt injection, jailbreaking, training data poisoning, and insecure output handling.
Partner with the Enterprise Data Protection team to design context-aware DLP controls that prevent unauthorized data ingestion or leakage into AI model pipelines.
Assess AI applications, agents, and integrations, including MCP servers and tool connectors, plus third-party AI products.
Research and implement emerging AI security frameworks and tooling, such as OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF.
Collaborate with cloud, infrastructure, and application security teams to review, document, and harden model hosting environments, AI workloads, and API gateways.

Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related STEM field, or equivalent practical experience.
5+ years of hands-on experience in enterprise security engineering, application security, cloud security, or security architecture.
Proven expertise in AI/ML security risks, including prompt injection, model evasion, data poisoning, insecure model supply chains, and LLM application vulnerabilities.
Experience implementing AI guardrails, including sensitive data and secrets detection, prompt-injection defenses, and tool-call policies across AI assistants, coding agents, and internally built agents.
Experience building automated detection and remediation workflows.
Strong knowledge of core enterprise security domains: Identity & Access Management, Cloud Infrastructure (AWS, GCP, or Azure), endpoint security, and Data Protection/DLP.
Proficiency in at least one modern programming or scripting language, such as Python or Go, for automation, API integrations, and custom security tooling.
Strong communication and cross-functional leadership skills, with a track record of enabling business and engineering teams to adopt new technologies safely.

Relevant cloud or security certifications, such as AWS Solutions Architect, Google Cloud Certified - Associate, CCSP, or PCNSE.

Immigration sponsorship: No. Palo Alto Networks will not sponsor applicants for work visas for this position.

Senior Enterprise AI Security Engineer

Job Description