Principal Threat Hunter; Unit

Our Mission At Palo Alto Networks®

we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values:
Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact.

Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

The Principal Threat Intelligence Hunter will sit within Unit 42 Managed Threat Hunting and drive proactive, intelligence-led hunting across customer environments. This role combines hands-on threat hunting with cyber threat intelligence analysis, helping multinational organizations stay one step ahead of adversaries and cyber threats. The Principal Cyber Threat Intelligence Hunter will analyze public and private threat intelligence, track adversary activity & capabilities, engage in rapid response efforts, model frontline incident data, then translate that intelligence into actionable hunting hypotheses, investigation workflows, behavioural profiles, and ultimately targeted customer notifications designed to empower our customers’ response and disrupt adversary activity.

This role will work across customer telemetry to investigate suspicious activity, validate emerging threats, and contribute to timely, professional reporting. The role will also collaborate closely with threat hunters, detection engineers, incident responders, MDR teams, and Unit 42 intelligence and security researchers to operationalize intelligence quickly and improve hunting outcomes across the service. Ultimately, this is a proactive, research-driven hunting role for an expert who can connect intelligence with real-world telemetry, maintain ongoing threat tracking while responding to emerging threats, fingerprint attacker behavior, investigate security incidents, mentor peers, and clearly communicate findings.

Help multinational organizations stay one step ahead of adversaries and cyber threats by delivering timely, actionable frontline intelligence. Help drive the strategic direction of Unit 42 Managed Threat Hunting, combining hands-on threat hunting execution with cyber threat intelligence. Assist leadership with triage and evaluation of ongoing campaigns and telemetry findings to inform team priorities. Keep the Unit 42 Managed Services intelligence flywheel spinning by capturing, modeling, and analyzing frontline incident data within our threat intelligence knowledge base.

Analyze public and private threat intelligence, Unit 42 research, adversary campaigns, malware activity, infrastructure, indicators, and TTPs. Translate threat intelligence into actionable hunting hypotheses, investigation workflows, hunting queries, and customer-facing findings. Execute threat hunting workflows, investigate results, and support timely reporting for the most consequential threats to our…