Senior Security Researcher - Vulnerability Research

Palo Alto Networks, Inc.; Santa Clara (CA); On-site; USD 163,000 - 263,000; Full time

Job summary

Palo Alto Networks, Inc. is seeking a Vulnerability Researcher to join Cortex Exposure Management. You will drive research into vulnerabilities, develop tests and exploits, and build essential tooling that powers our cyber capabilities.

You’ll work across security teams to prioritize issues and improve detection and response. Ideal candidates have 5+ years in vulnerability management or security research, strong networking knowledge, and hands-on experience with Nuclei, Nmap, Burp Suite, and

Qualifications

• 5+ years in vulnerability management or security research.
• Experience contributing to public vulnerability research and CVEs.
• Strong understanding of TCP/IP and networking protocols.
• Familiarity with Nuclei, OpenVAS, and Nmap.
• Knowledge of cybersecurity frameworks and vulnerability methodologies.
• Familiarity with tools like Metasploit, Burp Suite, Wireshark.
• Proficient in Python; willing to learn Java, Golang, C/C++ or Rust.
• Experience with Windows, Linux, macOS, and Unix-based systems.
• Security certifications (OSCP/GPEN/Pentest+) or willingness to obtain.

Responsibilities

• Develop and maintain a comprehensive vulnerability content repository.
• Shape the response to zero-day and critical vulnerabilities across attack surfaces.
• Conduct research and testing; enhance automation and workflows for risk identification.
• Analyze existing solutions and drive improvements across Cortex.
• Collaborate with teams to solve problems and reduce technical debt.
• Mentor researchers and ensure high-quality output.
• Take ownership of projects and see them through production.

Skills

Vulnerability management

Security research

Networking

Python

OS internals

Certifications

Tools

Nuclei

OpenVAS

Nmap

Burp Suite

Metasploit

Wireshark

Job description

Palo Alto Networks, Inc. is seeking a Vulnerability Researcher to join Cortex Exposure Management. You will drive research into vulnerabilities, develop tests and exploits, and build essential tooling that powers our cyber capabilities.

You’ll work across security teams to prioritize issues and improve detection and response. Ideal candidates have 5+ years in vulnerability management or security research, strong networking knowledge, and hands-on experience with Nuclei, Nmap, Burp Suite, and