{bc}
Apply
oracle

Principal Software Dev QA Engineer

Fortinet Inc.
Sunnyvale, USA
Full-time
Senior
Onsite
Discovered Today

Full Job Posting

Responsibilities

  • We are hiring a Principal QA Engineer for Fortinet’s AI security product line to own end-to-end testing of our AI-powered penetration testing product across SaaS and on-premises deployments.
  • This hands-on role combines test automation, offensive security expertise, and AI evaluation. You will set the quality strategy and release criteria, ensuring assessments run safely and produce accurate, verifiable findings.
  • Lead testing across discovery, attack planning and execution, reporting, and remediation verification, covering UI, APIs, agents, and backend services.
  • Build controlled security labs with known vulnerabilities and attack paths; verify exploitation evidence, false positives, false negatives, severity, and remediation guidance.
  • Evaluate AI planning and tool use, repeatability, model failures, and resistance to prompt injection; detect regressions from model, prompt, and tool changes.
  • Validate assessment safety, including scope enforcement, credential protection, execution limits, stop controls, and cleanup.
  • Test SaaS tenant isolation, provisioning, permissions, usage metering, and license enforcement; qualify on-premises installation, upgrades, rollback, and restricted connectivity.
  • Assess performance, scaling, and recovery during concurrent assessments, service failures, and network interruptions; verify result integrity and resume behavior.
  • Build automation and CI/CD regression suites; automate testbed provisioning, reset, and evidence collection.
  • Partner with Engineering, Product Management, and Operations on defect resolution and release gating; guide test reviews and mentor QA engineers.
  • 8+ years in software QA, test automation, or security engineering, including ownership of test strategy and release qualification for complex products.
  • Hands-on penetration testing experience, with the ability to reproduce vulnerabilities and independently verify findings.
  • Experience testing SaaS and on-premises products, including multi-tenancy, deployment, upgrades, and failure recovery.
  • Strong Python or equivalent programming skills, with experience building API and system test automation.
  • Solid networking, Linux, Windows, authentication, and authorization knowledge; experience troubleshooting distributed services using logs, metrics, and network captures.
  • Experience with a major cloud platform, Docker, Kubernetes, and performance or load testing.
  • Working knowledge of LLMs and autonomous agents, including tool calling and evaluation of variable outputs.
  • Strong technical judgment and communication; able to turn incomplete requirements into test coverage and explain release risks.
  • Must be able to work in the US without sponsorship.

Responsibilities

  • Required

Nice to Have

  • Experience with autonomous pentesting, vulnerability management, or security validation products; familiarity with the Fortinet ecosystem.
  • Knowledge of Active Directory, cloud IAM, MITRE ATT&CK, and OWASP testing methods; practical use of Burp Suite, Nmap, Metasploit, or BloodHound.
  • Experience with AI evaluation datasets, adversarial testing, infrastructure as code, or automated security labs.
  • OSCP, OSWE, GPEN, or comparable offensive security expertise.
  • Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program.
  • Wage ranges are based on various factors including the labor market, job type, and job level. Earnings for this position are expected to be $200,000 - $310,000 Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.
  • All roles are eligible to participate in the Fortinet equity program, Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Fortinet Inc.

Regional Account Manager, SLED

Nashville, USA

Discovered TodayFull-time

Regional Sales Engineer

Chicago, USA

Discovered TodayFull-time

Enterprise Systems Engineer (Artificial Intelligence) - Sydney/Melbourne

Sydney, AUS

Discovered TodayFull-time

Business Development Manager (Artificial Intelligence) - Sydney/Melbourne

Sydney, AUS

Discovered TodayFull-time

Early Careers: Software Development Engineer

Sunnyvale, USA

Discovered TodayFull-time

Business Development Manager (Artificial Intelligence) - Sydney/Melbourne

Sydney, AUS

Discovered TodayFull-time

Enterprise Systems Engineer (Artificial Intelligence) - Sydney/Melbourne

Sydney, AUS

Discovered TodayFull-time

Regional Account Manager, SLED

Nashville, USA

Discovered TodayFull-time