[Hiring] Principal Threat Hunter @Palo Alto Networks

Role Description

The Principal Threat Intelligence Hunter will sit within Unit 42 Managed Threat Hunting and drive proactive, intelligence-led hunting across customer environments. This role combines hands-on threat hunting with cyber threat intelligence analysis, helping multinational organizations stay one step ahead of adversaries and cyber threats.

• Analyze public and private threat intelligence, track adversary activity & capabilities.
• Engage in rapid response efforts and model frontline incident data.
• Translate intelligence into actionable hunting hypotheses, investigation workflows, and targeted customer notifications.
• Investigate suspicious activity, validate emerging threats, and contribute to timely reporting.
• Collaborate closely with threat hunters, detection engineers, incident responders, and Unit 42 intelligence and security researchers.
• Connect intelligence with real-world telemetry and maintain ongoing threat tracking.
• Mentor peers and clearly communicate findings.

Your Impact

• Deliver timely, actionable frontline intelligence to multinational organizations.
• Drive the strategic direction of Unit 42 Managed Threat Hunting.
• Assist leadership with triage and evaluation of ongoing campaigns.
• Capture, model, and analyze frontline incident data within our threat intelligence knowledge base.
• Translate threat intelligence into actionable hunting hypotheses and customer-facing findings.
• Execute threat hunting workflows and support timely reporting for significant threats.
• Investigate hunting leads based on IOCs, threat intelligence, and emerging adversary behaviors.
• Leverage and build cutting-edge tooling to identify and track adversaries.
• Escalate major security events to the Threat Hunting leadership team.
• Provide ongoing feedback on findings, hunting reports, and operational processes.

Qualifications

• 8+ years of experience in tactical threat hunting, cyber threat intelligence (CTI), DFIR, or advanced security operations.
• Strong background in tactical threat intelligence across diverse telemetry sources.
• Experience capturing and modeling incident data in intelligence platforms.
• Proven ability to develop & deliver technical findings into clear notifications for customers.
• Experience translating threat intelligence into high-fidelity hunting hypotheses and detection logic.
• Bonus Points: Experience in Incident Response Consulting, proficiency in building AI tooling, and published security blogs or research.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. The starting base salary is expected to be in the range of $163,900.00 - $265,100.00/yr. The offered compensation may also include restricted stock units and a bonus.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. We are committed to providing reasonable accommodations for all qualified individuals with a disability.

• Palo Alto Networks is an equal opportunity employer.
• We celebrate diversity in our workplace.
• All qualified applicants will receive consideration for employment without regard to legally protected characteristics.