Sr. Principal Security Researcher - Advanced Threat Prevention (ATP)

Palo Alto Networks • San Francisco, CA

11d • Onsite

About The Position

Join the team building and delivering threat detection capabilities for Advanced Threat Prevention by decoding network protocols and identifying applications. As a Sr. Principal Security Researcher, you will shape detection methodologies, drive parallel projects, and influence detection strategy at scale. You will propose innovative ideas, deliver them into production, and mentor researchers to protect enterprises worldwide from advanced threats.

Requirements

• 10+ years of deep technical experience in malware analysis (static/dynamic) and reverse engineering.
• BS/MS in Computer Science, Computer Engineering, or related field, or equivalent experience.
• Deep technical expertise in exploit techniques such as buffer overflows, XSS, and SQL injection.
• Extensive knowledge of core network protocols including HTTP, UDP, FTP, SMTP, DNS, and SMB.
• Proficiency in analyzing network traffic using tcpdump, Wireshark, or equivalent tools.
• Advanced proficiency in Windows and Linux development environments.
• Strong programming skills in scripting and system-level languages including Python, Bash, Perl, and C/C++.
• Strong leadership and communication skills with proven ability to mentor and guide other researchers.
• Demonstrated track record of successfully leading multiple projects end-to-end with measurable impact.
• Ability to influence detection strategy within the team and across related groups.

Nice To Haves

• Experience building or fine-tuning AI agents to autonomously triage alerts, summarize malware behavior, or generate detection content via LLMs.
• Hands-on experience with penetration testing tools like Metasploit and debugging tools like WinDbg.
• PhD in Cybersecurity or a related field.
• Publications or presentations at top security conferences such as Black Hat or DEF CON.

Responsibilities

• Lead the design and delivery of multiple major projects while proposing innovative detection ideas.
• Mentor and guide junior or mid-level researchers with technical direction and career development support.
• Drive advanced research into vulnerabilities and exploits to create effective IPS and ML-based detections.
• Ensure rapid response to Zero-Day vulnerabilities by releasing IPS protections to customers within 24 hours.
• Perform reverse engineering efforts to uncover new vulnerabilities and build proactive defenses.
• Define scalable detection methodologies for complex or emerging attack vectors across products.
• Partner with cross-functional teams to align detection strategy with product roadmaps and customer needs.
• Represent the team in technical discussions to help shape industry direction in threat prevention.

Benefits

• The compensation offered for this position will depend on qualifications, experience, and work location.
• For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below.
• The offered compensation may also include restricted stock units and a bonus.
• A description of our employee benefits may be found here.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree