Principal Threat Researcher (Unit 42) - Remote

Compensation context

This range is the expected starting base salary for this non-sales role. Restricted stock units (RSUs) and a bonus may be added.

Our Mission

Palo Alto Networks® describes one shared goal: keeping digital life safe. The company says it works where new ideas meet real results, tackling practical problems with advanced tools and fresh thinking. It says every person is heard and every suggestion matters, and it invites people who want career-defining work next to equally committed colleagues to apply.

Who We Are

To stay the security partner customers pick first, the company says it has to lead the way and set the direction for the industry. Staff pursue that daily through five stated values (Integrity, Inclusion, Collaboration, Disruption, and Execution). AI is built into how the company operates and is used to boost what each person can achieve. People who enjoy hard, real-world problems and want to brainstorm alongside top talent are encouraged to join.

The posting states the position is remote and that being apart does not limit impact. Hybrid teams work together across regions to tackle large problems, stay near customers, and grow. The culture is described as built on trust, accountability, and shared wins, with work that genuinely counts.

Job Summary

As a Principal Threat Researcher on Unit 42's National Security (NATSEC) team, you apply expert knowledge of cybercrime, nation-state Advanced Persistent Threats, and new threat areas. Working independently, you own senior-level tasking, close priority research gaps, and run custom intelligence research. You track adversary trends worldwide, answer RFIs, and build practical findings into efforts that protect national security missions. You also produce fast threat analysis during high-profile cyber events and mentor junior analysts, shaping wider company initiatives.

Key Responsibilities

• Gather, link, and analyze threat data from many global sources into one coherent intelligence picture.
• Run threat research on your own by designing, building, and maintaining tools and workflows.
• Turn complex technical findings into clear assessments tailored to national security audiences.
• Pivot through open-source and closed datasets to chart C2 infrastructure and identify TTPs.
• Produce quick threat analysis and technical input when big cyber events hit and when customers send urgent RFIs.
• Collaborate with sales, consulting, product engineering, and internal research teams to keep strategy aligned.

Qualifications

Required Qualifications

• At least 7 years in threat intelligence covering ransomware, nation-state activity, cybercrime, and supply-chain risk.
• Expert grasp of how adversaries move through an attack, their TTPs, and reliable indicators of compromise.
• Skilled with analysis tools such as passive DNS, host-based analysis, and analysis of network infrastructure.
• Scripting skills to support data collection and analysis.
• Proven at running tasks and projects on your own and suggesting process improvements.
• Strong problem solver in complex, unclear situations.
• Excellent spoken and written communication and a record of working with people at every level.

Preferred Qualifications

• Has mentored, led a team, or reviewed technical research output.
• Can interpret intelligence reports from inside and outside the company and act on them.
• Can research the dark web with proper OpSec.
• Comfortable with tools for static and dynamic malware analysis.
• Has worked in or with government agencies or fusion centers.
• Has spoken at large industry conferences.
• Works comfortably and effectively on a fully remote team.
• Adapts as the team grows and sets priorities based on project needs and deadlines.

Compensation Disclosure

What is paid depends on the candidate's qualifications and experience and on where they work. If the offer is made at the advertised level, the range shown below is the expected starting base for non-sales jobs, or base plus commission target for commissioned sales jobs. Restricted stock units (RSUs) and a bonus may be added, and the posting links to a description of benefits.

Range: $172,100 to $278,300 a year

Our Commitment

The company calls itself a group of trailblazers who aim high, take chances, and push back on the usual way cybersecurity is done. It says diverse teams working together are essential to its mission.

The company offers reasonable accommodations to qualified people with disabilities. Anyone needing help or an accommodation because of a disability or special need can email accommodations@paloaltonetworks.com.

The company states it offers equal employment opportunity and values a diverse workplace. Every qualified applicant is considered without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, age, ancestry, national origin, marital status, family or medical care leave, genetic information, medical condition, political affiliation, protected veteran status, physical or mental disability, or any other characteristic the law protects.

Applicant information is kept private in line with EEO guidance.

Immigration sponsorship: not offered; the company will not sponsor work visas for this role.

Application process

Submit your application through NorthStar. Employer screening may follow after submission.