Palo Alto Networks is looking for a Threat Detection Engineer to build tools that enable threat researchers and incident response consultants to work more efficiently with vast amounts of data, bridging the gap between application development and security research.
Requirements
- Expert experience in python is a must
- Strong understanding of fundamental software design for data access and processing larger datasets (REST/SQL/BQ/Mongo/etc…)
- Demonstrable expertise in an operational security role - soc analysis, reverse engineering, threat intelligence monitoring and/or creation
- Experience interpreting logs from commercial security products
- Deep understanding of sandbox technologies; how they work and interpreting their reports
Responsibilities
- designing and building threat centric application workflows
- process automations
- creation of threat intelligence for consumption by products, researchers, and customers
- automate the work, but then respond to operational anomalies and quality flags the system may raise
- responsible as subject matter experts to interpret threat intelligence from both automated systems and machine learning
- creating the software modules that generate indicator lists, measure indicator quality, and gauge the quality of intelligence ingested
Other
- This role bridges security research and fundamental software implementation
- The Threat Data Platform is the keystone for intelligence production and dissemination; you are its steward
- Passion for using automation to enable workflows and automate your day to day tasks
- The compensation offered for this position will depend on qualifications, experience, and work location.
- We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed.
