Senior Threat Hunter (Unit 42)

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

Senior Threat Hunter (U42 MTH) - Job Description

Your impact 

• Help multinational organizations stay one step ahead of adversaries and cyber threats.
• Collaborate with customers via handling inbound communications
• Provide support and assistance to the Managed Detection and Response (MDR) team for hunting-related activities.
• Serve as a critical line of defense by providing coverage for core threat hunting activities.
• Collaborate with and guide customers by responding to hunting-related requests and issues related to suspected security incidents.
• Execute existing threat hunting reports and hunting workflows, investigate results, and support timely customer reporting.
• Investigate hunting leads based on IOCs, threat intelligence, and internal detections.
• Monitor the threat landscape and help prepare initial context for emerging campaigns, enabling the global team to continue deeper investigation during the week.
• Ensure timely and appropriate escalation of major or high-impact security events to leadership.
• Provide ongoing feedback on findings, hunting reports, queries, and operational workflows to support continuous improvement.
• This position requires flexibility to work in 24*7 rotational shifts depending on business demands

Qualifications

Qualifications

Your Experience

• 5+ years of relevant cybersecurity experience, preferably in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, MDR, or a similar security operations role.
• Strong understanding of the evolving threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals.
• Experience investigating suspicious activity, security incidents, or targeted threats across endpoints, networks, identity, and cloud.
• Ability to work independently, make sound investigative decisions, and escalate when findings require additional review or urgent action.
• Experience handling customer-facing or stakeholder-facing security requests, including clear written communication, investigation summaries, and recommendations.
• Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, credential theft, command and control, and data exfiltration.
• Background in writing, modifying, or executing detections, hunting queries, or log-based investigations.
• Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques.
• Excellent written and oral communication skills in English.
• Strong attention to detail and ability to clearly document investigation logic, findings, and conclusions.
• Knowledge of threat hunting methodologies and the ability to learn novel techniques.
• Experience in an Incident Response environment is a plus.
• Proficiency in Python and SQL is beneficial.
• Familiarity with malware analysis is advantageous (e.g. malicious script deobfuscation).
• Ability to simplify and clarify complex ideas.
• Experience writing technical reports, investigation summaries, or customer-facing security analysis.
• Ability to analyze and understand the infrastructure, behaviors, and objectives of malicious campaigns.
• Self-starter who can work independently and adapt to changing priorities.

Why choose us

• Contribute to making the world a safer and better place.
• Perform essential threat hunting activities on a wide variety of data sources.
• Gain hands-on experience by executing threat hunting queries, performing data analysis, and interpreting results to identify suspicious activity and potential threats.
• Join a global team of experts who handle threats and adversaries on a global scale daily.
• Enhance your knowledge and experience across multiple cybersecurity domains: Endpoint, Network, Cloud, Identity, and 3rd-party vendor data sources.
• Learn how threat hunting hypotheses are created, executed, validated, and translated into customer-facing outcomes.
• Take part in the continuous improvement of hunting reports, queries, workflows, and operational processes.
• We believe in automation, AI, and scaling.

Additional Information

The Team

We’re not your ordinary Threat Hunting team. We’re a diverse and global group of security professionals who deal with big data and challenge the status quo in order to remain one step ahead of adversaries and protect our customers from cyber threats.

Being a threat hunter for one of the fastest-growing high-tech cybersecurity companies is a once-in-a-lifetime opportunity. You’ll be working with some of the brightest minds in technology, and our global teams are on the front line of defense against cyberattacks.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: We can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.