Senior Threat Hunter

Join Palo Alto Networks as a Senior Threat Hunter in Unit 42's Managed Services group. In this critical role, you will proactively search for cyber threats across multiple datasets, lead threat hunting activities, and collaborate with various teams to enhance protection and readiness for future events. You will have the opportunity to make a significant impact on the cybersecurity landscape and contribute to making the world a safer place.

• Proactively search for signs of malicious activity within an organization's network, using advanced tools and methodologies to identify anomalies and potential threats.
• Lead and conduct threat hunting activities related to malware, threat actor groups, and campaign activity, and actively engage in research and experimentation to develop new hunting techniques.
• Collaborate and guide customers on the best ways to enhance their protection and readiness for future events, and work closely with other teams to share findings and coordinate response efforts.

• Understanding of APT operations, including attack vectors, propagation, data exfiltration, lateral movement, persistence mechanisms, and more
• Experience in an Incident Response environment is a plus
• Ability to simplify and clarify complex ideas
• Ability to analyze and understand the infrastructure of malicious campaigns
• Understanding the threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals
• Excellent written and oral communication skills in English
• Self-starter who can work independently and adapt to changing priorities
• Strong attention to detail
• Familiarity with reverse engineering is advantageous
• Experience utilizing XDR/EDR tools
• Background in forensic analysis and incident response tools (both Dynamic and Static, such as IDA Pro, Ollydbg, and Wireshark) to identify threats and assess the extent and scope of compromises
• Experience in writing technical blog posts and analysis reports
• Experience investigating targeted, sophisticated, or hidden threats in both endpoints and networks
• Knowledge of advanced threat hunting methodologies and the ability to develop novel techniques
• 4+ years of relevant experience with a proven track record in cybersecurity research, specializing in either APTs or cybercrime, but with the ability to address the broader threat landscape
• Proficiency in Python and SQL is beneficial
• Familiarity with organizational cybersecurity measures, including protective tools and remediation techniques