Remote Principal Threat Researcher, Financial Services

Palo Alto Networks; Illinois; Hybrid; USD 163,000 - 263,000; Full time

Job summary

Palo Alto Networks is seeking a Principal Researcher for Financial Services in Unit 42. You will leverage expert knowledge of industry-specific threats to provide meaningful intelligence, identify emerging trends, and communicate findings to internal and external stakeholders.

You will collaborate with researchers, partners, and the broader cybersecurity community, translating threat intelligence into accessible formats and contributing to thought leadership across the financial services sector.

Qualifications

• 7+ years of experience in threat intelligence across ransomware, nation-state, cybercrime, supply-chain/3rd party risks, cloud, mobile, dark web, offensive security, and insider threats.
• Advanced understanding of the adversary’s attack lifecycle, TTPs and high-fidelity indicators of compromise.
• Experience with tools for data analysis, such as passive DNS, network infrastructure and host-based information.
• Proven communicator and collaborator with success in building trusted relationships with internal and external stakeholders.
• Strong verbal and written communication skills.
• Ability to lead tasks and projects independently and drive process improvement.
• Proven record as a problem solver in complex and often ambiguous situations.
• Drive to overcome the most challenging obstacles and look for ways to improve results.
• Ability to understand and assimilate different points of view, manage time and prioritize work based on project needs and deadlines.

Responsibilities

• Demonstrate expertise in collecting and analyzing threat intelligence data across all categories of cyberthreats relevant to the financial services industry.
• Document and communicate emerging threats, trends and their potential impact to the financial services industry in a timely manner.
• Translate your threat intelligence collection into multiple formats that can be shared effectively with internal and external partners.
• Map new threat intelligence findings into threat intelligence repositories.
• Investigate and communicate an adversary’s actions through use of common frameworks such as MITRE ATT&CK and the Diamond Model.
• Conduct deep analysis using Palo Alto Networks internal telemetry and open-source datasets.
• Conduct quick-turnaround threat analysis for high-visibility threat research and urgent requests.
• Serve as an internal SME for threats related to the financial services industry.
• Demonstrate thought leadership across Unit 42 and within the financial services industry.
• Foster strong collaboration with key stakeholders across different functional teams and among partner organizations.
• Grow and maintain industry connections.

Skills

Threat intelligence

Communication

Project leadership

Collaboration

Scripting

Data analysis tools

Adversary lifecycle

Public speaking

Tools

Passive DNS

Network infrastructure

Host-based information

Job description

Palo Alto Networks is seeking a Principal Researcher for Financial Services in Unit 42. You will leverage expert knowledge of industry-specific threats to provide meaningful intelligence, identify emerging trends, and communicate findings to internal and external stakeholders.

You will collaborate with researchers, partners, and the broader cybersecurity community, translating threat intelligence into accessible formats and contributing to thought leadership across the financial services sector.