Full-Time Threat Hunting Researcher (Unit 42) - Remote

• Help multinational organizations stay one step ahead of adversaries and cyber threats
• Collaborate and guide our customers on the best ways to enhance their defenses and readiness for future events
• Improve Palo Alto Networks' solutions by identifying and analyzing new threats, tactics, and actors
• Influence the industry by sharing knowledge and findings
• Collaborate with multiple research and development groups
• Contribute to making the world a safer and better place

• Perform threat hunting activities on a wide variety of data sources every day
• Work on the latest cybersecurity research projects and attacks on a daily basis
• Build hypotheses, execute manual hunting techniques, gather and analyze results, perform forensic activities, and deliver reports
• Join a global team of experts who handle threats and adversaries on a global scale daily
• Enhance your knowledge and experience in all domains of cybersecurity: Network, Endpoint, Cloud, and 3rd-party vendor data sources
• Develop, create, and execute new hunting hypothesis methodologies to uncover threats, understand their root causes, and attribute them
• We believe in automation and scaling
• Leverage big data to discover threats and multiple threat intelligence

• Understanding the evolving threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals
• Experience investigating targeted, sophisticated, and/or hidden threats in both endpoints and networks
• 4+ years of relevant experience with a proven track record in cybersecurity research, specializing in either APTs or cybercrime, but with the ability to address the broader threat landscape
• Background in writing detections/hunting queries
• Understanding of APT operations, including attack vectors, propagation, data exfiltration, lateral movement, persistence mechanisms, and more
• Familiarity with organizational cybersecurity measures, including protective tools and remediation techniques
• Excellent written and oral communication skills in English
• Strong attention to detail
• Knowledge of advanced threat hunting methodologies and the ability to develop novel techniques
• Experience in an Incident Response environment is a plus
• Proficiency in Python and SQL is beneficial
• Familiarity with reverse engineering is advantageous
• Ability to simplify and clarify complex ideas
• Experience in writing technical blog posts and analysis reports
• Ability to analyze and understand the infrastructure of malicious campaigns
• Self-starter who can work independently and adapt to changing priorities

What is the last date for applying to the job?

Which countries are accepted for this remote job?