[Hiring] Principal Consultant, Threat Intelligence Advisory @Palo Alto Networks

Role Description

The Principal Consultant, Threat Intelligence Advisory is a senior-level consulting position within Unit 42 Proactive Services team. The individual will work alongside the Consulting Director of Threat Intelligence Advisory EMEA in providing threat intelligence insights to clients via threat assessments, in support of cyber risk management engagements.

• Work within the Unit 42 Threat Intelligence Advisory team to develop and deliver threat-informed services to international clients.
• Lead Threat Intelligence Advisory engagements such as:
  • Threat assessments
  • Threat intelligence maturity assessments
  • Threat intelligence capability building
  • Threat-led offensive security testing
• Provide intelligence input for risk management consulting engagements (e.g. SOC Assessments, Cloud Assessment, AI Security Assessments).
• Leverage internal Unit 42 datasets and finished intelligence, as well as OSINT, to identify relevant threats to organisations across sectors and geographies.
• Work with security teams at clients (i.e. TI, CISO, SOC, threat hunting, red team) to help them operationalise threat intelligence into measurable outcomes.
• Amplify Unit 42’s presence and credibility in the marketplace through thought leadership, including via speaking engagements, and blog articles on threat intelligence topics.
• Leverage in-house AI platforms to optimise and streamline existing methods and processes.

Qualifications

• Excellent English written and verbal communications skills, with a proven ability to tailor messaging for audiences ranging from highly technical analysts to executive leadership.
• Demonstrable experience in directly improving CTI processes and procedures of large enterprises, whether in house or as a consultant.
• Deep understanding of cybercriminal and state-sponsored groups, their TTPs and high level mitigations.
• Understanding and practical application of intelligence tradecraft, adhering to Analytic Standards (ICD 203) in the production of finished intelligence.
• Strong familiarity with the MITRE ATT&CK framework.
• Demonstrated ability to engage with business and security stakeholders, understand their requirements and their key decision-making processes.
• Ability to travel up to 30% of the time.

Requirements

• Experience in intelligence led-red team exercises like CBEST, TIBER, iCAST, Corie.
• Knowledge of threat actors hunting tools and techniques.
• Experience in incident response, digital forensic, or security operations.
• Experience in risk management consulting advising clients on appropriate security controls.
• Additional language skills to interface with regional clients (i.e. Arabic, Spanish).
• Experience with, or demonstrable curiosity about, AI agentic workflows in threat intelligence.
• Cybersecurity industry certifications such as CRTIA, CCTIM, GCTI are a plus but not essential.
• A demonstrable public track record of authoring threat intelligence reports and delivering presentations at cyber security conferences.

Company Description