Senior Threat Hunter

Palo Alto Networks; United States; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Healthcare plans

On-site gym and wellness facilities

Equity grants / ESPP

Flexible time off

Job summary

Palo Alto Networks is seeking a senior Threat Hunter for Unit 42’s Managed Services group. You will lead proactive threat hunting across networks and datasets, focusing on malware campaigns, threat actors, and evolving tactics.

Strong collaboration with Incident Response, Threat Intelligence, and leadership is essential. The role requires hands-on technical skills, cross-disciplinary knowledge in cybersecurity, and a drive to stay ahead of threats through research and experimentation.

Qualifications

• 4+ years of cybersecurity research experience with focus on APTs or cybercrime.
• Proven threat hunting experience across endpoints and networks.
• Experience collaborating with Incident Response and Threat Intelligence teams.

Responsibilities

• Lead and conduct threat hunting activities across datasets.
• Identify signs of malicious activity and anomalies proactively.
• Collaborate with Incident Response, Threat Intelligence, Customers, and leadership to coordinate responses.

Skills

Threat hunting

Incident Response

Python

SQL

Threat intelligence

Communication

Reverse engineering

Tools

XDR/EDR tools

Wireshark

IDA Pro

Job description

• Palo Alto Networks is seeking a senior Threat Hunter to join Unit 42’s Managed Services group
• Threat Hunters in Unit 42 play a critical role in safeguarding organizations against cyber threats by proactively searching for threats across multiple datasets
• They are responsible for leading and conducting threat hunting activities related to malware, threat actor groups, and campaign activity
• This position requires a cross-disciplinary approach that involves a deep understanding of cybersecurity, incident response, threat intelligence, and hands‑on technical skills
• One primary responsibility of this role is to proactively search for signs of malicious activity within an organization’s network
• Our Threat Hunters use advanced tools and methodologies to identify anomalies and potential threats that may go undetected by traditional security solutions
• Additionally, our Threat Hunters should actively engage in research and experimentation to develop new hunting techniques and stay ahead of evolving threats
• Effective communication is crucial in this role
• Threat Hunters must work closely with other teams, such as Incident Response, Threat Intelligence, Customers, and cybersecurity leadership, to share findings and coordinate response efforts
• Your Impact
• Help multinational organizations stay one step ahead of adversaries and cyber threats
• Collaborate and guide our customers on the best ways to enhance their protection and readiness for future events
• Improve Palo Alto Networks’ solutions by identifying and analyzing new threats and tactics
• Influence the industry by sharing knowledge and findings
• Collaborate with multiple research and development groups
• Contribute to making the world a safer and better place

Benefits

• Healthcare: We value your health and provide options so you can choose what best supports your lifestyle and personal health goals. Various nationwide plans — including "Blue Shield of California", Kaiser Permanente, Delta Dental, VSP, and more — are available to you and your family. Our providers offer the flexibility you want and the coverage you need
• Wellness: With a large on-site gym and daily, instructor-led exercise classes at HQ in Santa Clara, Palo Alto Networks actively supports employee fitness. Our juice bar, Gym & Juice, features fresh juice blends, a quick and nutritious option pre- or post-workout. And our ongoing wellness speaker series highlights the latest trends in health and wellness
• Development: Professional development is serious business at Palo Alto Networks, where the Talent Development team offers 25+ courses to help employees boost their careers and develop leadership capability
• Financial: Most roles are eligible for equity grants, and we now offer new hires a quarterly vesting schedule right away. We want you to be fairly compensated and rewarded as soon as you make an impact – on our team, that happens immediately! And because we consider every employee a stakeholder in our long-term success, we offer an Employee Stock Purchase Plan (ESPP) with a 24-month lookback. From life insurance to health savings accounts, we provide ways to help you protect and grow your wealth. Palo Alto Networks offers both traditional and Roth 401(k) options, along with a company match of 50% to a max annual amount of $1,000
• Time Off: In addition to paid corporate holidays, Flexible Time Off programs empower our employees to balance their work schedules with personal time off. We offer 12 weeks of full pay for medical leave and 6 weeks of full pay for parental leave. As a company with strong ties to the military and veterans, we also offer 26 weeks of full pay for military leave
• Perks: Our corporate discount program provides employees with significant discounts on merchandise, travel and entertainment. We offer many on-site perks at headquarters, including cafeterias, fuel service, dry cleaning service, EV charging stations, and a company store. We also provide complimentary drinks, fresh fruit, and snacks in break rooms across our campus to help everyone power through the day.

Life at Palo Alto Network

Understanding of APT operations, including attack vectors, propagation, data exfiltration, lateral movement, persistence mechanisms, and moreExperience in an Incident Response environment is a plusAbility to simplify and clarify complex ideasAbility to analyze and understand the infrastructure of malicious campaignsUnderstanding the threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentalsExcellent written and oral communication skills in EnglishSelf-starter who can work independently and adapt to changing prioritiesStrong attention to detailFamiliarity with reverse engineering is advantageousExperience utilizing XDR/EDR toolsBackground in forensic analysis and incident response tools (both Dynamic and Static, such as IDA Pro, Ollydbg, and Wireshark) to identify threats and assess the extent and scope of compromisesExperience in writing technical blog posts and analysis reportsExperience investigating targeted, sophisticated, or hidden threats in both endpoints and networksKnowledge of advanced threat hunting methodologies and the ability to develop novel techniques4+ years of relevant experience with a proven track record in cybersecurity research, specializing in either APTs or cybercrime, but with the ability to address the broader threat landscapeProficiency in Python and SQL is beneficialFamiliarity with organizational cybersecurity measures, including protective tools and remediation techniques