As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Your Career

The Cortex Threat Intelligence team is in charge of maintaining an up-to-date overview of the ever-changing threat landscape and its effects on the Cortex products. This includes the collection, analysis, and dissemination of technical threat intelligence from multiple internal and external sources. As part of the work, you'll be in charge of automating threat intelligence processes and developing tools and methodologies to increase productivity.

Palo Alto's Cortex XDR is one of the best in market XDR products, with an almost unparalleled telemetry and data lake. Our team is a very data-driven team, and as such, it is a great place for like-minded analysts who are enthusiastic about data mining, threat actors, and malware!

Your Impact

• Track and monitor the cyber threat landscape, using various sources in order to raise flags for any potential gaps and to improve Cortex XDR's security coverage
• Perform in-depth intelligence research of malware/exploit techniques to provide actionable insights and suggestions on how to improve product capabilities
• Analyze technical intelligence arriving from various sources and provide summaries and analyses for internal or external use - This may include releasing marketing-related materials to customers or on the company's website
• Automate processes related to data collection and analysis
• Support the security research teams by creating or integrating tools that simplify the research
• Work closely with other teams, such as research, product development, and customer support, to communicate findings and collaborate on security improvements
• Create detailed reports and documentation on threat intelligence findings and recommended actions

Your Experience

• Proven 4 years of experience in at least one of the following domains - threat intelligence / SOC / threat hunting / malware analysis / incident response
• Knowledge and proven working experience in Python and specifically using APIs to collect data from multiple sources - A MUST
• Experience in BigQuery or other SQL-based querying languages - A MUST
• Well-versed in the cyber landscape, malware capabilities and attacking fundamentals
• Experience in analyzing malware in a controlled lab environment, Malware analysis skills (static, dynamic) - A MUST
• Ability to analyze large amounts of technical data, extract crucial details, and to draw meaningful conclusions
• Ability to work independently, lead projects and bring them to fruition, while working across the company with other departments
• High proficiency in English, both verbal and written
• Experience in OSINT or intelligence analysis (such as military experience) - an advantage

The Team

Our Threat Intelligence Team is dedicated to staying ahead of the ever-evolving cyber threat landscape. We continuously monitor and analyze emerging threats to ensure our products defenses are robust and up-to-date. To identify potential coverage gaps in Cortex XDR, we run malware simulations, testing our products against the latest threats. Additionally, we ingest and analyze large volumes of telemetry and OSINT data, allowing us to identify trends and potential threats. This combination of research, automation, and data analysis allows us to maintain a proactive stance in cybersecurity.

#LI-NS14

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Commitment

We're problem solvers that take risks and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.