Remote Threat Hunter & Intelligence Researcher

Palo Alto Networks; Sacramento (CA); Remote; USD 117,000 - 189,000; Full time

Job summary

Palo Alto Networks is seeking a Threat Hunting Researcher in Unit 42 to help multinational organizations stay ahead of adversaries. You will provide coverage for core threat hunting activities and guide customers through urgent hunting-related requests.

You will investigate leads based on IOCs, threat intelligence, and internal detections, monitor the threat landscape, and escalate high-impact events to leadership as needed. Excellent English communication is essential.

Qualifications

• 3+ years of cybersecurity experience in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, or MDR.
• Experience handling customer-facing security requests with clear written communication and recommendations.
• Knowledge of attacker behaviors and threat landscapes.

Responsibilities

• Serve as a critical line of defense by providing coverage for core threat hunting activities.
• Collaborate with and guide customers by responding to urgent hunting-related requests and suspected security incidents.
• Execute threat hunting reports and workflows, investigate results, and support timely customer reporting.
• Investigate hunting leads based on IOCs, threat intelligence, and internal detections.
• Monitor the threat landscape and prepare initial context for emerging campaigns to enable deeper investigations.
• Ensure timely and appropriate escalation of major or high-impact security events to leadership.
• Provide support and assistance to the MDR team for hunting-related activities.
• Provide ongoing feedback on findings, reports, queries, and workflows to support continuous improvement.

Skills

Threat hunting

Incident investigation

SOC analysis

Detection engineering

MDR

Customer-facing

Tools

Python

SQL

Job description

Palo Alto Networks is seeking a Threat Hunting Researcher in Unit 42 to help multinational organizations stay ahead of adversaries. You will provide coverage for core threat hunting activities and guide customers through urgent hunting-related requests.

You will investigate leads based on IOCs, threat intelligence, and internal detections, monitor the threat landscape, and escalate high-impact events to leadership as needed. Excellent English communication is essential.