Sr Staff Engineer Software (Threat Data Platform)

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We believe collaboration thrives in person. That's why most of our teams work from the office full time, with flexibility when it's needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Your Career

Threat Detection Engineer (Threat Data Platform)

The Threat Data Platform team specializes in providing tools enabling threat researchers and incident response consultants to work more efficiently across the vast amounts of data Palo Alto Networks has at its disposal. Our experts bridge the gap between application development using modern best practices/technology and the world-class research teams.

This role will challenge you to become a true force-multiplier, partnering with other security research teams by designing and building threat centric application workflows, process automations, and the creation of threat intelligence for consumption by products, researchers, and customers. This is a hybrid role where we automate the work, but then respond to operational anomalies and quality flags the system may raise.

Your Impact

• This role bridges security research and fundamental software implementation
• You will be responsible as subject matter experts to interpret threat intelligence from both automated systems and machine learning.
• You will also be creating the software modules that generate indicator lists, measure indicator quality, and gauge the quality of intelligence ingested.
• The Threat Data Platform is the keystone for intelligence production and dissemination; you are its steward

• Demonstrable expertise in an operational security role - soc analysis, reverse engineering, threat intelligence monitoring and/or creation
• Experience interpreting logs from commercial security products
• Deep understanding of sandbox technologies; how they work and interpreting their reports
• Passion for using automation to enable workflows and automate your day to day tasks
• Expert experience in python is a must
• Strong understanding of fundamental software design for data access and processing larger datasets (REST/SQL/BQ/Mongo/etc...)