> Markdown version of [/jobs/ext/2152239-threat-hunter-researcher](https://www.wearedevelopers.com/jobs/ext/2152239-threat-hunter-researcher). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Hunter Researcher - **Company:** Palo Alto Networks - **Location:** Austin, TX, United States - **Experience:** Experienced - **Salary:** $110,800.0 - $179,225.0 - **Contract:** Permanent contract - **Skills:** Big Data, Cloud Computing, Python (Programming Language), OllyDBg, Reverse Engineering, SQL Databases, Wireshark, IDA Pro, Cybercrime, Palo Alto Networks, Vulnerability Analysis - **Published:** August 20, 2026 - **Apply:** https://dejobs.org/x/x/400B8D542C8B4114AFE388F27A99A2A5/job/ ## About the Role Your Experience * Understanding the threat landscape, including attack tools, tactics, and techniques, as well as networking and security fundamentals. * Experience investigating targeted, sophisticated, or hidden threats in both endpoints and networks * 3+ years of relevant experience with a proven track record in cybersecurity research, specializing in either APTs or cybercrime, but with the ability to address the broader threat landscape. * Background in forensic analysis and incident response tools (both Dynamic and Static, such as IDA Pro, Ollydbg, and Wireshark) to identify threats and assess the extent and scope of compromises. * Understanding of APT operations, including attack vectors, propagation, data exfiltration, lateral movement, persistence mechanisms, and more. * Familiarity with organizational cybersecurity measures, including protective tools and remediation techniques. * Excellent written and oral communication skills in English. * Strong attention to detail. * Knowledge of advanced threat hunting methodologies and the ability to develop novel techniques. * Experience in an Incident Response environment is a plus. * Proficiency in Python and SQL is beneficial. * Familiarity with reverse engineering is advantageous. * Ability to simplify and clarify complex ideas. * Experience in writing technical blog posts and analysis reports. * Ability to analyze and understand the infrastructure of malicious campaigns. * Self-starter who can work independently and adapt to changing priorities. ## Description * Collaborate and guide our customers on the best ways to enhance their protection and readiness for future events. * Improve Palo Alto Networks' solutions by identifying and analyzing new threats and tactics. * Influence the industry by sharing knowledge and findings. * Collaborate with multiple research and development groups. * Contribute to making the world a safer and better place. Why to choose us * Perform threat hunting activities on any data source every day. * Deal with the latest cybersecurity research projects and attacks on a daily basis. * Build hypotheses, execute manual hunting techniques, gather and analyze results, perform forensic activities, and deliver reports. * Join a global team of experts who handle threats and adversaries on a global scale daily. * Enhance your knowledge and experience in all domains of cybersecurity: Network, Endpoint, Cloud, IoT, Mobile devices, and 3rd-party vendor data sources. * Develop, create, and execute new hunting hypothesis methodologies to uncover threats, understand their root causes, and attribute them. * We believe in automation and scaling. * Leverage big data to discover threats and multiple threat intelligence. ## Related Videos - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)