Principal Security Researcher - EDR (Cortex)

Our Mission

At Palo Alto Networks®, we're united by a shared mission-to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place.

Who We Are

This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

Job Description

Your CareerJoin our research team as a Security Researcher and become an integral part of our expanding group building Autopilot - a groundbreaking autonomous investigation and response platform.In this role, you'll transcend traditional research boundaries by designing, developing, and implementing investigation modules that enable Autopilot to autonomously identify, analyze, and neutralize sophisticated threats across massive infrastructures.Your responsibilities will encompass analyzing emerging malware patterns, adversarial tactics, and process behaviors across enterprise-scale environments, leveraging telemetry from millions of endpoints. You'll focus on discovering attack signatures, detecting statistical outliers, and ensuring the platform effectively counters real-world threats and advanced persistent threat campaigns through validation against live production data.Your ImpactArchitect Autonomous Security Systems: Build graph-based algorithms and intelligent decision-making frameworks to investigate and neutralize targeted threat actorsScale Human Expertise: Apply AI, statistical modeling, and graph theory to replicate complex analyst workflows and automate incident response at scaleTransform Telemetry into Intelligence: Engineer reusable frameworks that convert raw security data into actionable insights and automated response capabilitiesCounter Advanced Adversaries: Conduct deep-dive analysis of malware and APT attack chains to stay ahead of evolving TTPs and emerging threatsDrive Research Innovation: Collaborate in a high-growth environment to influence product direction, refine research workflows, and advance detection mechanisms