Professional Services Consultant, AI Security

This is a fully remote position, open to applicants in California, +4 more states.

📋 Description

• Strategize and implement comprehensive Prisma AIRS deployments across Network, API, Microperimeter, and Kubernetes intercept modes.

• Oversee customer onboarding processes, including license activation, creation of deployment profiles, and management of API key lifecycles.

• Integrate AIRS within application stacks utilizing REST APIs, LLM gateway proxies, CI/CD pipelines, and AI developer tools.

• Configure and optimize AI security profiles addressing prompt injection, DLP, and guardrails using Strata Cloud Manager.

• Provide guidance for Day-2 operations, including dashboard assessments, API key rotation, and ongoing detection adjustments.

• Design security architectures for LLM gateways, incorporating virtual key management and pre/post-call guardrail settings.

• Enhance security for agentic applications through pre-tool-call scanning and indirect prompt injection defenses.

• Apply LLM threat taxonomies, covering areas such as prompt injection, jailbreaking, and OWASP Top 10 for LLMs.

• Assess trade-offs between fail-open and fail-close scenarios and analyze impacts of inline scan latency.

• Implement AIRS infrastructure with Terraform across AWS, Azure, and GCP platforms.

• Establish cloud IAM roles and service identities to enable secure firewall-to-cloud access.

• Install and set up Kubernetes CNI for inspecting AI traffic at the container level and harvesting IP tags.

• Deploy panredirect agents on Linux workloads, applying selective steering rules and ensuring systemd persistence.

• Develop and sustain scalable delivery templates, Terraform architectures, and API integration frameworks.

• Collaborate with Product and Engineering teams to identify deployment edge cases and feature deficiencies.

• Conduct enablement workshops covering AIRS architecture, threat scenarios, and operational runbooks.

⛳️ Requirements

• At least 5 years of experience in a customer-facing technical delivery role, such as Professional Services or Solutions Engineering.

• Practical experience with Terraform or similar Infrastructure as Code (IaC) tools for AWS, Azure, or GCP environments.

• Proficient understanding of Kubernetes, including kubectl, Helm charts, namespace management, and CNI.

• Strong grasp of cloud networking principles, including VPC/VNet architecture, routing, load balancers, and IAM roles.

• Experience with REST API integration, authentication management, and testing using Python or curl.

• Familiarity with Linux system administration, systemd service management, and network interface setup.

• Comprehensive understanding of AI/ML concepts and the MLOps lifecycle.

• In-depth knowledge of LLM security vulnerabilities, including prompt injection, jailbreaking, and agentic attack surfaces.

• Acquainted with AI security frameworks such as OWASP Top 10 for LLMs or MITRE ATLAS.

• Proficient in Python or similar scripting languages.

• Strong troubleshooting abilities across cloud infrastructure, containerized workloads, and API integrations.

• Excellent communication skills to articulate complex AI security architectures to both technical and executive audiences.

• Preferred: direct experience with Palo Alto Networks products like Strata Cloud Manager, Panorama, NGFW, or Prisma Cloud.

• Preferred: familiarity with LLM gateway proxies such as LiteLLM, LangChain, or Kong AI Gateway.

• Preferred: experience in AI red teaming, structured adversarial testing, and jailbreak methodologies.

• Preferred: development of agentic AI applications, including tool-calling agents and multi-agent systems.

• Preferred: expertise in CI/CD pipeline security and developer tooling integration.

• Preferred: certifications in cloud, cybersecurity, or AI/ML.

• Preferred: advanced knowledge of containerization platforms such as OpenShift, GKE Autopilot, or AKS.

• Must not require immigration sponsorship; the employer will not sponsor work visa applications.

🏝️ Benefits

• Restricted stock units.

• Bonus opportunities.

• Comprehensive employee benefits package.

• Reasonable accommodations available for qualified individuals with disabilities or special needs.