Principal Threat Researcher (Unit 42) - Remote

Palo Alto Networks•Reston, OR

8d•$172,100 - $278,300•Remote

About The Position

As a Principal Threat Researcher on the Unit 42 National Security (NATSEC) team, you will apply expert-level knowledge of nation-state advanced persistent threats, cybercrime, and emerging threats. You will independently own high-level tasking, address priority research gaps, and conduct custom intelligence research. The role tracks global adversary trends, resolves requests for information (RFIs), and produces actionable findings to support national security missions. You will also provide rapid-turnaround analysis during high-visibility cyber events and mentor junior analysts, contributing to broader company initiatives. This is a remote role. You will collaborate across geographies and with internal research, product engineering, consulting, and sales teams.

Requirements

At least 7 years of threat intelligence experience focused on ransomware, nation-state threats, cybercrime, and supply-chain risks.
Expert understanding of adversary attack lifecycles, TTPs, and high-fidelity indicators of compromise.
Experience with data analysis tools, including passive DNS, network infrastructure analysis, and host-based information analysis.
Knowledge of scripting languages for data collection and analysis.
Ability to lead tasks and projects independently and recommend process improvements.
Strong problem-solving skills in complex and ambiguous situations.
Excellent verbal and written communication skills, with experience collaborating across organizational levels.

Nice To Haves

Experience as a mentor, team lead, or technical reviewer for technical research outputs.
Ability to interpret and act on internal and external intelligence reports.
Ability to research the dark web while maintaining appropriate operational security (OpSec).
Familiarity with static and dynamic malware analysis tools.
Prior experience working within or alongside government agencies or fusion centers.
Experience speaking at large industry conferences.
Comfort collaborating effectively within a fully remote team.
Ability to adapt to a growing team and prioritize work according to project needs and deadlines.

Responsibilities

Collect, correlate, and analyze threat data from disparate global datasets to develop cohesive intelligence assessments.
Independently lead threat research initiatives by designing, developing, and maintaining tools and workflows.
Translate complex technical findings into clear, tailored assessments for national security stakeholders.
Conduct pivot analysis across closed and open-source datasets to map command-and-control infrastructure and identify tactics, techniques, and procedures (TTPs).
Provide rapid-turnaround threat analysis and technical feedback during major cyber events and urgent customer RFIs.
Collaborate with internal research teams, product engineering, consulting, and sales to drive strategic alignment.
Mentor junior analysts and contribute to broader company initiatives.