Senior Threat Researcher

About Palo Alto Networks

Palo Alto Networks is dedicated to safeguarding the digital lifestyle by combining innovation with impactful cybersecurity solutions. Our workplace values inclusion, cooperation, and integrity while leveraging AI to enhance the influence of every individual employee. We believe that collaboration is best fostered face-to-face, hence we primarily operate from our office, but with flexible arrangements as needed to drive precise and effective results.

Role Overview

As part of the Unit 42 National Security Team, you will join a global network of researchers and threat intelligence analysts embedded within customer environments. Your primary focus will be on tracking cyber adversaries, sophisticated ransomware groups, and persistent threats to address critical customer intelligence needs.

Key Responsibilities

• Deliver prompt and usable intelligence aligned with customer demands.
• Utilize extensive datasets such as netflow records, malware samples, and passive DNS data to monitor malicious cyber actors, their infrastructures, and campaign activities.
• Work collaboratively with international threat intelligence teams to identify and analyze emerging cyber threats.
• Develop tactical threat hunts and strategic evaluations tailored to customer requirements.
• Liaise with product engineering teams to enhance detection capabilities within the company's product ecosystem.

Required Qualifications and Experience

• Possession of an active Top Secret Security Clearance.
• Degree in Computer Science or Computer Engineering, or alternatively 8+ years of professional experience as a cleared cyber threat intelligence analyst.
• Proficient with BigQuery for data analysis.
• Programming skills in Python, C, and/or C++.
• Knowledge of common malware families and current research methodologies.
• Understanding of cyber threat actors’ strategies and tactics, including familiarity with the MITRE ATT&CK Matrix for enterprise and detailed tactics.
• Strong insights into cyber security actor toolsets, methodologies, and significant incidents.
• Experience in analyzing netflow, DNS, IP registration, malware telemetry, and other relevant datasets to compile detailed threat profiles.
• Collaborated with diverse information security teams such as fusion centers, security operations, vulnerability management, incident response, threat hunting, and analytics.
• Effective management of time and priorities, often handling multiple urgent tasks concurrently.
• Excellent oral and written communication abilities, capable of delivering presentations for conferences and client briefings.

Diversity and Equal Opportunity Statement

Palo Alto Networks embraces diversity and strives to build an inclusive environment for all employees. We provide reasonable accommodations to qualified candidates with disabilities. This position is not eligible for visa sponsorship. Employment decisions are made without regard to protected characteristics such as age, race, gender, disability, or other legally protected factors.