Principal Threat Researcher

Palo Alto Networks

. Collect, correlate, and analyze threat data from disparate global datasets into cohesive intelligence stories .

Posted 10/23/2026full-timeRemote • Virginia • United StatesLead💰 $172,100 - $278,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence with a focus on ransomware, nation-state, and cybercrime risks, alongside strong analytical skills for interpreting complex data and delivering actionable insights. Proven ability to lead research initiatives, mentor junior analysts, and communicate effectively with stakeholders.

Highest-signal resume keywords

Threat Intelligence AnalysisAdversary Attack LifecyclesData Collection ScriptingMentoring Junior AnalystsNetwork Infrastructure Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat Data AnalysisPivot AnalysisTechnical Assessment TranslationIndicators Of CompromiseTactics Techniques And Procedures (TTPs)Ransomware AnalysisCybercrime Risk AssessmentSupply-Chain Risk AnalysisDark Web ResearchMalware Analysis

Soft Skills

Problem-SolvingCommunicationLeadershipCollaborationMentoring

Tools & Technologies

Passive DNSNetwork Analysis ToolsHost-Based Information Analysis ToolsStatic Malware Analysis ToolsDynamic Malware Analysis Tools

Industry Keywords

National SecurityCyber EventsGovernment AgenciesFusion CentersIntelligence Reports

Tech Stack

Tools & technologies

DNS

About the role

Key responsibilities & impact

Collect, correlate, and analyze threat data from disparate global datasets into cohesive intelligence stories
Independently lead threat research initiatives by designing, developing, and maintaining tools and workflows
Translate complex technical findings into clear, tailored assessments for national security stakeholders
Perform pivot analysis across closed- and open-source datasets to map C2 infrastructure and identify TTPs
Deliver rapid-turnaround threat analysis and technical feedback during major cyber events and urgent customer RFIs
Partner with internal research teams, product engineering, consulting, and sales to drive strategic alignment
Track global adversary trends, resolve RFIs, and conduct custom intelligence research
Mentor junior analysts and influence broader company initiatives

Requirements

What you’ll need

Minimum of 7 years of experience in threat intelligence focused on ransomware, nation-state, cybercrime, and supply-chain risks
Expert understanding of adversary attack lifecycles, TTPs, and high-fidelity indicators of compromise
Experience with passive DNS, network infrastructure analysis, and host-based information analysis
Knowledge of scripting languages for data collection and analysis
Ability to lead tasks and projects independently and recommend process improvements
Strong problem-solving skills in complex and ambiguous situations
Excellent verbal and written communication skills
Experience serving as a mentor, team lead, or technical reviewer for technical research outputs (preferred)
Ability to interpret and act on internal and external intelligence reports (preferred)
Ability to conduct dark web research with appropriate OpSec (preferred)
Familiarity with static and dynamic malware analysis tools (preferred)
Prior experience working within or alongside government agencies or fusion centers (preferred)
Experience speaking at large industry conferences (preferred)
Comfortable collaborating within a fully remote team environment (preferred)
No immigration sponsorship; applicants must not require employer-sponsored work visas

Benefits

Comp & perks

Restricted stock units
Bonus
Employee benefits package
Reasonable accommodations for qualified individuals with disabilities