Principal Threat Researcher (Unit 42)

Palo Alto Networks•Reston, VA

1d•$172,100 - $278,300•Remote

About The Position

As a Principal Threat Researcher on the Unit 42 National Security (NATSEC) team, you will use expert-level knowledge of nation-state advanced persistent threats, cybercrime, and emerging threats. You will independently take ownership of high-level tasking, address priority research gaps, and conduct custom intelligence research. The role tracks global adversary trends, resolves requests for information (RFIs), and develops actionable findings to support national security missions. You will also provide rapid-turnaround analysis during high-visibility cyber events and mentor junior analysts to influence broader company initiatives. This is a remote role. The researcher works with teams across geographies and partners with internal research, product engineering, consulting, and sales groups. The position requires at least seven years of threat intelligence experience focused on ransomware, nation-state threats, cybercrime, and supply-chain risks. Compensation may include restricted stock units and a bonus; the stated annual base salary range is $172,100 to $278,300.

Requirements

At least 7 years of threat intelligence experience focused on ransomware, nation-state threats, cybercrime, and supply-chain risks.
Expert understanding of adversary attack lifecycles, TTPs, and high-fidelity indicators of compromise.
Experience with data analysis tools, including passive DNS, network infrastructure analysis, and host-based information analysis.
Knowledge of scripting languages to facilitate data collection and analysis.
Ability to lead tasks and projects independently and recommend process improvements.
Strong problem-solving skills for complex and ambiguous situations.
Excellent verbal and written communication skills, with a track record of collaboration across organizational levels.

Nice To Haves

Experience mentoring, serving as a team lead, or technically reviewing research outputs.
Ability to interpret and act on internal and external intelligence reports.
Ability to conduct dark web research with appropriate operational security (OpSec).
Familiarity with static and dynamic malware analysis tools.
Prior experience working within or alongside government agencies or fusion centers.
Experience speaking at large industry conferences.
Ability to collaborate effectively in a fully remote team environment.
Ability to adapt within a growing team and prioritize work according to project needs and deadlines.

Responsibilities

Collect, correlate, and analyze threat data from disparate global datasets to develop cohesive intelligence assessments.
Independently lead threat research initiatives by designing, developing, and maintaining tools and workflows.
Translate complex technical findings into clear, tailored assessments for national security stakeholders.
Conduct pivot analysis across closed- and open-source datasets to map command-and-control infrastructure and identify tactics, techniques, and procedures (TTPs).
Provide rapid-turnaround threat analysis and technical feedback during major cyber events and urgent customer RFIs.
Partner with internal research teams, product engineering, consulting, and sales to drive strategic alignment.
Track global adversary trends, address priority research gaps, conduct custom intelligence research, and resolve RFIs.
Mentor junior analysts and contribute to broader company initiatives.