Remote Threat Hunter & Incident Investigator

Palo Alto Networks; United States; Remote; USD 117,000 - 189,000; Full time

Job summary

Palo Alto Networks is seeking a Threat Hunting Researcher in Unit 42 to help multinational organizations stay ahead of adversaries and cyber threats. You will serve as a critical line of defense by providing coverage for core threat hunting activities and guiding customers through urgent hunting-related requests.

You will investigate hunting leads based on IOCs, threat intelligence, and internal detections, collaborate with customers on incidents, and ensure timely escalation of high-impact

Qualifications

• 3+ years of relevant cybersecurity experience in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, or MDR.
• Strong understanding of the evolving threat landscape, attack tools, tactics, techniques, and networking/security fundamentals.
• Experience investigating suspicious activity, security incidents, or targeted threats across endpoints, networks, identity, and cloud.
• Ability to work independently, make sound investigative decisions, and escalated findings requiring additional review.
• Experience handling customer‑facing security requests, including clear written communication, investigation summaries, and recommendations.
• Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, and exfiltration.
• Background in writing, modifying, or executing detections, hunting queries, or log‑based investigations.
• Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques.
• Excellent written and oral communication skills in English, with strong attention to detail for documenting investigation logic.

Responsibilities

• Serve as a critical line of defense by providing coverage for core threat hunting activities.
• Collaborate with and guide customers by responding to urgent hunting-related requests and suspected security incidents.
• Execute threat hunting reports and workflows, investigate results, and support timely customer reporting.
• Investigate hunting leads based on IOCs, threat intelligence, and internal detections.
• Monitor the threat landscape and prepare initial context for emerging campaigns to enable deeper investigations.
• Ensure timely and appropriate escalation of major or high-impact security events to leadership.
• Provide support and assistance to the Managed Detection and Response (MDR) team for hunting-related activities.
• Provide ongoing feedback on findings, reports, queries, and workflows to support continuous improvement.

Skills

Threat hunting

Incident investigation

SOC analysis

Detection engineering

Customer-facing security requests

Investigation reporting

Communication skills

Tools

Python

SQL

Job description

Palo Alto Networks is seeking a Threat Hunting Researcher in Unit 42 to help multinational organizations stay ahead of adversaries and cyber threats. You will serve as a critical line of defense by providing coverage for core threat hunting activities and guiding customers through urgent hunting-related requests.

You will investigate hunting leads based on IOCs, threat intelligence, and internal detections, collaborate with customers on incidents, and ensure timely escalation of high-impact