Senior Security Researcher – Identity Threat Detection & Response

About the role

Palo Alto Networks is seeking a Senior Security Researcher to join its Identity Threat Detection and Response (ITDR) team. You will investigate emerging identity‑related threats across SaaS, cloud, on‑premises and hybrid environments, and build advanced detection models that protect customers at scale.

Key responsibilities

• Research innovative detection methods for targeted attackers operating on endpoints, networks, cloud and SaaS platforms.
• Simulate real‑world attacks in lab environments and perform deep behavioral analysis.
• Develop and refine statistics‑based classification algorithms to improve detection models.
• Explore specific threat scenarios to enhance model capabilities.
• Collaborate with a diverse research group to improve processes and product outcomes.
• Stay current on the latest APTs, attacker methodologies and TTPs.

Required profile

• Minimum 5 years of experience with Active Directory security and identity‑related attacks.
• Strong understanding of operating system internals.
• In‑depth knowledge of network protocols such as Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP.
• Experience with enterprise infrastructure components including firewalls, VPNs and security products.

Required skills

• Active Directory security
• Kerberos protocol
• RPC protocol
• SMB protocol
• HTTP protocol
• SMTP protocol
• DNS protocol
• DHCP protocol
• Firewall configuration
• VPN technologies