
Senior MDR Analyst (Unit 42) - REMOTE
Palo Alto Networks is a global cybersecurity company building security products that help organizations move to digital and cloud systems safely.
Stay safe on NorthStar
Never send money to an employer to secure a job.
About the job
Compensation context
This range is the expected starting base salary for this non-sales role. Restricted stock units (RSUs) and a bonus may be added.
Our Mission
Palo Alto Networks® describes one shared goal: keeping digital life safe. The company says it works where new ideas meet real results, tackling practical problems with advanced tools and fresh thinking. It says every person is heard and every suggestion matters, and it invites people who want career-defining work next to equally committed colleagues to apply.
Who We Are
To stay the security partner customers pick first, the company says it has to lead the way and set the direction for the industry. Staff pursue that daily through five stated values (Integrity, Inclusion, Collaboration, Disruption, and Execution). AI is built into how the company operates and is used to boost what each person can achieve. People who enjoy hard, real-world problems and want to brainstorm alongside top talent are encouraged to join.
The posting states the position is remote and that being apart does not limit impact. Hybrid teams work together across regions to tackle large problems, stay near customers, and grow. The culture is described as built on trust, accountability, and shared wins, with work that genuinely counts.
Job Summary
Job Summary
Join Unit 42 as a Senior MDR (Managed Detection and Response) Analyst providing high-end security to customers worldwide. You spot and handle complex cyber incidents, handle escalations, and lead tactical shift work. The team wants a proactive problem-solver who is strong at threat analysis on the Cortex Platform. The position is remote and shift-based, covers time zones worldwide, and includes weekends.
Key Responsibilities
- Handle security alerts across customer environments from first investigation through final response.
- Study complex telemetry from endpoints, networks, identities, and cloud to find and stop malicious activity.
- Record and share key findings and fixes with customers and internal teams.
- Work with MDR managers on shift execution, technical upgrades, and workflow improvements.
- Collaborate with Security Research and Threat Intelligence teams to strengthen detection and response.
Qualifications
Qualifications
- At least 5 years in MDR, SOC, Managed Security Services, or Incident Response work.
- Practical experience with firewall, SOAR, SIEM, and EDR tools.
- Strong grasp of cyber threats, attack methods, and incident response.
- Practical knowledge of how APT groups operate and how attacks unfold, including lateral movement and spread.
- Understands how organizations protect themselves, the security tools involved, and remediation techniques.
- Has used investigative tools such as EDR, host forensics, packet capture analysis, and SIEM.
- Strong people skills and proven, effective collaboration with customers.
- Able to cover holiday, weekend, and overnight shifts for a round-the-clock MDR operation.
- The role requires U.S. citizenship because of business and customer needs.
Preferred
Hands-on with Cortex XSOAR and/or Cortex XDR. Past shift-based or overnight security operations work. Current security certifications such as CEH, CySA+, or similar. Past work on a dedicated Incident Response or SOC team Compensation Disclosure
What is paid depends on the candidate's qualifications and experience and on where they work. If the offer is made at the advertised level, the range shown below is the expected starting base for non-sales jobs, or base plus commission target for commissioned sales jobs. Restricted stock units (RSUs) and a bonus may be added, and the posting links to a description of benefits.
Range: $127,600 to $189,200 a year
Our Commitment
The company calls itself a group of trailblazers who aim high, take chances, and push back on the usual way cybersecurity is done. It says diverse teams working together are essential to its mission.
The company offers reasonable accommodations to qualified people with disabilities. Anyone needing help or an accommodation because of a disability or special need can email accommodations@paloaltonetworks.com.
The company states it offers equal employment opportunity and values a diverse workplace. Every qualified applicant is considered without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, age, ancestry, national origin, marital status, family or medical care leave, genetic information, medical condition, political affiliation, protected veteran status, physical or mental disability, or any other characteristic the law protects.
Applicant information is kept private in line with EEO guidance.
Immigration sponsorship: not offered; the company will not sponsor work visas for this role.
Application process
Submit your application through NorthStar. Employer screening may follow after submission.
About Palo Alto Networks
Palo Alto Networks is a global cybersecurity company, founded in 2005 and led by CEO Nikesh Arora, with more than 5,000 employees. It builds security products that help organizations move to digital and cloud systems safely, and it describes its goal as being the security partner organizations choose first so that each day is safer than the last. The company lists five values: disruption, execution, collaboration, integrity, and inclusion. Its teams work in the United States, India, Israel, the United Kingdom, and Australia.
Benefits
- Diverse Health Plans
- On-site Gym & Classes
- Professional Development
- Equity & ESPP
- 401(k) with Company Match
- Paid Medical & Parental Leave
- Military Leave Benefits
- Corporate Discounts & Perks
- Complimentary Refreshments
Individual offers may also include restricted stock units (RSUs) and a bonus; see each posting for details.
Technology
The supplied company profile lists 76 technologies. Examples include Microsoft Azure, Google Cloud Platform, AWS, Kubernetes, Terraform, GitHub, Salesforce, Tableau, Python, Go, React, Google Tag Manager.
Remote teams
Employees work in the United States, India, Israel, the United Kingdom, and Australia. Each role sets its own location rules; the roles listed here are United States only.
Work week
A four-day work week is not among the listed benefits.
Social presence
The supplied company profile lists LinkedIn and Twitter.