Threat Hunting Researcher

Palo Alto Networks

. Provide coverage for core threat hunting activities .

Posted 9/23/2026full-timeRemote • California • United StatesMid-LevelSenior💰 $117,000 - $189,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat hunting, incident investigation, and security analysis, with a strong understanding of the threat landscape and attack methodologies. Proficient in customer communication and reporting, with the ability to analyze and respond to security incidents effectively.

Highest-signal resume keywords

Threat HuntingIncident InvestigationPython ProficiencySQL ProficiencySecurity Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingIncident InvestigationDetection EngineeringDFIRMDRPythonSQLMalware AnalysisLog-Based InvestigationsWriting Technical Reports

Soft Skills

Clear Written CommunicationAttention to DetailIndependent Decision-Making

Tools & Technologies

Protective ToolsResponse ActionsRemediation Techniques

Industry Keywords

CybersecuritySOC AnalysisAttack VectorsPrivilege EscalationLateral MovementExfiltrationEmerging Campaigns

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSQL

About the role

Key responsibilities & impact

Provide coverage for core threat hunting activities
Collaborate with and guide customers on urgent hunting-related requests and suspected security incidents
Execute threat hunting reports and workflows, investigate results, and support timely customer reporting
Investigate hunting leads based on IOCs, threat intelligence, and internal detections
Monitor the threat landscape and prepare initial context for emerging campaigns
Escalate major or high-impact security events to leadership
Support the Managed Detection and Response (MDR) team with hunting-related activities
Provide ongoing feedback on findings, reports, queries, and workflows for continuous improvement

Requirements

What you’ll need

3+ years of relevant cybersecurity experience in threat hunting, incident investigation, SOC analysis, detection engineering, DFIR, or MDR
Strong understanding of the evolving threat landscape, attack tools, tactics, techniques, and networking/security fundamentals
Experience investigating suspicious activity, security incidents, or targeted threats across endpoints, networks, identity, and cloud
Ability to work independently, make sound investigative decisions, and escalate findings requiring additional review
Experience handling customer-facing security requests, including clear written communication, investigation summaries, and recommendations
Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, and exfiltration
Background in writing, modifying, or executing detections, hunting queries, or log-based investigations
Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques
Excellent written and oral communication skills in English, with strong attention to detail for documenting investigation logic
Experience in an Incident Response environment
Proficiency in Python and SQL
Familiarity with malware analysis
Experience writing technical reports, investigation summaries, or customer-facing security analysis
Ability to analyze and understand the infrastructure, behaviors, and objectives of malicious campaigns
Must not require immigration sponsorship; the employer will not sponsor work visas for this position

Benefits

Comp & perks

Restricted stock units may be included
Bonus may be included
Reasonable accommodations for qualified individuals with a disability or special need