Senior Threat Researcher, Unit 42

Palo Alto Networks•Sacramento, CA

4d•Hybrid

About The Position

As a member of the Unit 42 National Security Team (NATSEC), you will work closely with a globally distributed team of vulnerability researchers, reverse engineers, and threat intelligence analysts. You will be embedded in a customer environment where you will track cybercriminals, ransomware groups, and advanced persistent threats in support of sensitive customer intelligence requirements. This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

Requirements

BS/MS in Computer Science, Computer Engineering, or 5+ years of experience as a cleared cyber threat intelligence analyst
Working knowledge of BigQuery
Proficiency in Python, C, and/or C++
Familiar with static and dynamic malware analysis and common industry tools
Strong knowledge of cyber security threat actors, particularly their tactics, techniques, procedures, tooling, and noteworthy attacks
Familiarity with threats impacting critical infrastructure and government organizations
Experience leveraging netflow, passive DNS, IP registration, malware telemetry, and other data sets to form comprehensive analysis
Experience working with information security teams such as fusion centers, security operations centers, vulnerability threat management, security incident management, threat hunting, and data analytics
Excellent time management, often working under tight deadlines and multiple assignments
Outstanding verbal and written communication skills. Comfortable with creating and delivering presentations in a range of environments, from industry conferences to customer briefings.
Native-level English fluency; any other languages a plus.
Must reside within a local commuting distance to Sacramento, CA, to support on-site requirements.

Responsibilities

Provide timely, actionable intelligence to meet customer intelligence requirements.
Leverage global datasets (netflow, malware, passive DNS, geospatial intelligence, etc) to track malicious cyber actors, their infrastructure, and campaigns.
Collaborate with a global team of threat intelligence analysts to analyze and develop coverage for emerging threats.
Develop strategic threat assessments in support of customer needs.
Communicate with product engineering teams to improve detection efficacy across our product ecosystem.