Sr Threat Hunter Researcher

JR United Kingdom; Bolton; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading cybersecurity firm is seeking a senior Threat Hunter on its renowned Managed Services team. In this role, you will be responsible for proactively identifying cyber threats using advanced methodologies and tools, contributing to critical incident response activities, and engaging with a diverse team to enhance cybersecurity methodologies. The ideal candidate will possess extensive knowledge of APTs and incident response, alongside strong analytical skills.

Qualifications

• Experience with cybersecurity research and APTs.
• Background in forensic analysis and incident response.
• Familiarity with reverse engineering is advantageous.

Responsibilities

• Proactively search for signs of malicious activity within networks.
• Engage in research to develop new hunting techniques.
• Work closely with cybersecurity teams to share findings.

Skills

Understanding the threat landscape

Investigating targeted threats

Excellent written communication

Strong attention to detail

Advanced threat hunting methodologies

Experience in Incident Response

Proficiency in Python

Proficiency in SQL

Education

Eligibility for UK Security Clearance

Tools

IDA Pro

Ollydbg

Wireshark

Job description

Job Description

Palo Alto Networks is seeking a senior Threat Hunter to join Unit 42's Managed Services group. Threat Hunters play a critical role in safeguarding organizations against cyber threats by proactively searching for threats across multiple datasets. They are responsible for leading and conducting threat hunting activities related to malware, threat actor groups, and campaign activity. This position requires a deep understanding of cybersecurity, incident response, threat intelligence, and hands-on technical skills.

One primary responsibility is to proactively search for signs of malicious activity within an organization's network using advanced tools and methodologies. Threat Hunters also engage in research to develop new hunting techniques and stay ahead of evolving threats.

Effective communication is crucial. Threat Hunters must work closely with Incident Response, Threat Intelligence, Customers, and cybersecurity leadership to share findings and coordinate responses.

Qualifications

• Have or be eligible for UK Security Clearance (SC)
• Understanding the threat landscape, attack tools, tactics, techniques, networking, and security fundamentals
• Experience investigating targeted, sophisticated, or hidden threats in endpoints and networks
• Relevant cybersecurity research experience, especially in APTs or cybercrime
• Background in forensic analysis and incident response tools (e.g., IDA Pro, Ollydbg, Wireshark)
• Understanding of APT operations and attack vectors
• Knowledge of organizational cybersecurity measures
• Excellent written and oral communication skills in English
• Strong attention to detail
• Knowledge of advanced threat hunting methodologies and developing new techniques
• Experience in Incident Response is a plus
• Proficiency in Python and SQL is beneficial
• Familiarity with reverse engineering is advantageous
• Ability to simplify complex ideas
• Experience writing technical blog posts and analysis reports
• Ability to analyze malicious campaign infrastructure
• Self-starter capable of working independently and adapting to changing priorities

Additional Information

This role requires eligibility for UK Security Check (SC) Clearance, including the last five years in the UK and British citizenship. If these criteria are not met, application cannot proceed.

The Team

Unit 42 is the global threat intelligence team at Palo Alto Networks, sharing high-quality research on adversaries, malware, and attack campaigns. Our analysts uncover adversary behaviors and share insights to improve cybersecurity industry-wide.

Our Commitment

We value diversity and are committed to providing accommodations for individuals with disabilities. Palo Alto Networks is an equal opportunity employer, considering all qualified applicants without regard to legally protected characteristics.