Remote Principal Threat Hunter – AI-Driven Intel

Palo Alto Networks, Inc.; Seattle (WA); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible work options

Comprehensive benefits

Job summary

Palo Alto Networks is seeking a Principal Threat Intelligence Hunter to join Unit 42 Managed Threat Hunting. This remote role supports proactive, intelligence‑led hunting across multinational environments, translating threat intelligence into actionable hunting hypotheses and customer‑facing findings.

You will work with threat hunters, detection engineers, incident responders, and global researchers to operationalize intelligence quickly, improve hunting outcomes, and contribute to scalable

Qualifications

• 6+ years of experience in tactical threat hunting, cyber threat intelligence (CTI), DFIR, or advanced security operations.
• Strong background in identifying attacker fingerprints across endpoint, network, cloud, and identity telemetry.
• Experience translating threat intelligence into high‑fidelity hunting hypotheses and customer‑facing findings.

Responsibilities

• Lead proactive, intelligence‑led threat hunting across customer environments.
• Analyze public and private threat intelligence, Unit 42 research, adversary campaigns, and IOCs to generate hunting hypotheses.
• Develop hunting queries, investigation workflows, and clear customer reports.
• Collaborate with threat hunters, detection engineers, incident responders, MDR teams, and Unit 42 researchers to operationalize intelligence.
• Escalate major events to Threat Hunting leadership and continuously improve reports, workflows, and automation.

Skills

Threat hunting

Cyber threat intelligence

DFIR

Security operations

Python

SQL

Tools

Python

SQL

Job description

Palo Alto Networks is seeking a Principal Threat Intelligence Hunter to join Unit 42 Managed Threat Hunting. This remote role supports proactive, intelligence‑led hunting across multinational environments, translating threat intelligence into actionable hunting hypotheses and customer‑facing findings.

You will work with threat hunters, detection engineers, incident responders, and global researchers to operationalize intelligence quickly, improve hunting outcomes, and contribute to scalable