{"id":3506040,"url":"https://alion.io/job/fortinet-principal-software-dev-qa-engineer","title":"Principal Software Dev QA Engineer","company":{"id":52696,"name":"Fortinet","domain":"fortinet.com","url":"https://alion.io/company/fortinet-blog","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":85,"open_postings":196,"ghost_share":0,"stale_share":0.791,"repost_share":0,"time_to_fill_p50_days":3,"computed_at":"2026-11-06T05:58:05Z"}},"role":"QA","role_family":"QA","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":310000,"currency":"USD","period":"year","gross":null,"usd_annual":310000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Function Calling","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"Active Directory","optional":true},{"name":"BloodHound","optional":true},{"name":"IAM","optional":true},{"name":"Metasploit","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Nmap","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-10-26T21:00:32Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-06T13:48:27Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"We are hiring a Principal QA Engineer for Fortinet’s AI security product line to own end-to-end testing of our AI-powered penetration testing product across SaaS and on-premises deployments.\nThis hands-on role combines test automation, offensive security expertise, and AI evaluation. You will set the quality strategy and release criteria, ensuring assessments run safely and produce accurate, verifiable findings.\n We are hiring a Principal QA Engineer for Fortinet’s AI security product line to own end-to-end testing of our AI-powered penetration testing product across SaaS and on-premises deployments.\nThis hands-on role combines test automation, offensive security expertise, and AI evaluation. You will set the quality strategy and release criteria, ensuring assessments run safely and produce accurate, verifiable findings.\nResponsibilities\nLead testing across discovery, attack planning and execution, reporting, and remediation verification, covering UI, APIs, agents, and backend services.\nBuild controlled security labs with known vulnerabilities and attack paths; verify exploitation evidence, false positives, false negatives, severity, and remediation guidance.\nEvaluate AI planning and tool use, repeatability, model failures, and resistance to prompt injection; detect regressions from model, prompt, and tool changes.\nValidate assessment safety, including scope enforcement, credential protection, execution limits, stop controls, and cleanup.\nTest SaaS tenant isolation, provisioning, permissions, usage metering, and license enforcement; qualify on-premises installation, upgrades, rollback, and restricted connectivity.\nAssess performance, scaling, and recovery during concurrent assessments, service failures, and network interruptions; verify result integrity and resume behavior.\nBuild automation and CI/CD regression suites; automate testbed provisioning, reset, and evidence collection.\nPartner with Engineering, Product Management, and Operations on defect resolution and release gating; guide test reviews and mentor QA engineers.\nRequired\n8+ years in software QA, test automation, or security engineering, including ownership of test strategy and release qualification for complex products.\nHands-on penetration testing experience, with the ability to reproduce vulnerabilities and independently verify findings.\nExperience testing SaaS and on-premises products, including multi-tenancy, deployment, upgrades, and failure recovery.\nStrong Python or equivalent programming skills, with experience building API and system test automation.\nSolid networking, Linux, Windows, authentication, and authorization knowledge; experience troubleshooting distributed services using logs, metrics, and network captures.\nExperience with a major cloud platform, Docker, Kubernetes, and performance or load testing.\nWorking knowledge of LLMs and autonomous agents, including tool calling and evaluation of variable outputs.\nStrong technical judgment and communication; able to turn incomplete requirements into test coverage and explain release risks.\nMust be able to work in the US without sponsorship.\nNice to Have\nExperience with autonomous pentesting, vulnerability management, or security validation products; familiarity with the Fortinet ecosystem.\nKnowledge of Active Directory, cloud IAM, MITRE ATT&CK, and OWASP testing methods; practical use of Burp Suite, Nmap, Metasploit, or BloodHound.\nExperience with AI evaluation datasets, adversarial testing, infrastructure as code, or automated security labs.\nOSCP, OSWE, GPEN, or comparable offensive security expertise.\nFortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program.\nWage ranges are based on various factors including the labor market, job type, and job level. Earnings for this position are expected to be $200,000 - $310,000 Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.\nAll roles are eligible to participate in the Fortinet equity program, Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion","description_format":"text","description_chars":4277,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Endpoint Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T05:37:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 125 · green card filings: 113","filings_12m":125,"filings_prev_12m":189,"green_card_filings_12m":113,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":26}],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.449,"p_room":0.35,"age_days":10,"expected_fill_days":3,"reasons":["conf:4","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":310000,"is_top_pay":true},"html_url":"https://alion.io/job/fortinet-principal-software-dev-qa-engineer","json_url":"https://alion.io/job/fortinet-principal-software-dev-qa-engineer.json","meta":{"generated_at":"2026-11-06T18:01:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52696},"rest":"https://alion.io/mcp/rest/get_company?id=52696"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffortinet-principal-software-dev-qa-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffortinet-principal-software-dev-qa-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffortinet-principal-software-dev-qa-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fortinet-principal-software-dev-qa-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffortinet-principal-software-dev-qa-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3506040}},{"tool":"search_jobs","arguments":{"company":"fortinet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3506040},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}