Full-Time Senior Principal Researcher (Unit 42)

We are seeking a Senior Principal, Cyber Threat Intelligence on our Fusion Intelligence Team (FIT), which is part of the Intel Response Unit within our broader Unit 42 Threat Intelligence organization. FIT’s mission is to conduct accelerated threat intelligence collection and analysis with a focus on pivoting from open-source intelligence to internal holdings to contextualize, cluster, and develop insights into emerging and ongoing threat activity. You will have the opportunity to collaborate with world-class researchers and engineers across Palo Alto Networks.

• Leverage unique data holdings and partner across teams: Harness the full weight of the company's unique data holdings, including product telemetry, front line Incident Response (IR) data, and partner information. Utilize these resources to produce and communicate the most unique and valuable insights.
• Produce Intelligence Bulletins, Threat Briefs, and other sharable content based on unique findings derived from the team’s analysis. Partner with other research and product teams to build joint capabilities and ensure findings are leveraged to the full extent.
• Accelerate OSINT fusion: Integrate open source technical sources with other available data to build a more complete cyber threat intelligence picture. Conduct accelerated analysis to enhance the organization's threat intelligence knowledge repository and bolstering our knowledge of threat activity to drive threat actor attribution. Ensure continuous updates to threat actor, industry, region, and malware profiles.
• Lead Technical Projects: Lead innovative projects within the team and across Unit 42 that drive forward the efficiency and effectiveness of the mission. Work directly with Unit 42 engineering to improve team workflows and processes.
• Contribute to external engagement: Amplify Unit 42 presence and credibility in the marketplace through thought leadership, including via speaking engagements, publishing threat research.
• Leverage AI for Analytic Workflows: Integrate Generative AI, NotebookLM, and other artificial intelligence and machine learning solutions across all phases of the intelligence lifecycle to improve analytic workflows. Use and develop new AI solutions to reduce research toil, query existing intelligence holdings, and accelerate report and presentation creation.
• Mentor and Review Technical Analysis. Leverage your expertise to mentor other researchers and support the growth of overall team capabilities.

Expert technical experience in Cyber Threat Intelligence including actionable knowledge of cyber adversary groups, tactics, and techniques, malware analysis, and hunting methodologies. Strong experience with hypergraph modeling and clustering process-level details within the context of threat activity. Ability to contextualize cyber events, identify how the events fit into a current or historical pattern, the impact on an industry or organization, and tailored defensive recommendations. Ability to leverage multiple telemetry types and intelligence sources to generate unique insights into potential threats and associate malicious activity. Strong writing and presentation skills, with the ability to effectively communicate complex threat intelligence information to diverse audiences. Proficiency in developing and maintaining scripts to streamline intelligence workflows, enhance efficiency, and improve data accuracy. Experience with prompt engineering and leveraging Google’s AI capabilities to support development of intelligence products. Bachelor’s Degree or equivalent military experience - an advanced degree such as MS is a plus.

What is the last date for applying to the job?

Which countries are accepted for this remote job?