Senior Windows Detection Researcher (Cortex)

Job Summary

The team is responsible for developing and improving our Windows anti-malware prevention. This includes having top-notch knowledge about the latest malware families in the wild, Windows internals, different attack frameworks and hacktools. As part of this, the team analyzes customer data and issues to prevent malicious activities in our customer's environment, and help to improve the product.

Key Responsibilities

• Research and analyze malware and keep up-to-date on the most recent tactics and techniques used in the wild
• Create behavioral-based protection that enhances our product's coverage
• Leverage Palo Alto Networks massive collection network to identify coverage gaps and emerging threats
• Assist in the design, evaluation, and implementation of new security technologies
• Work in close coordination with other teams, including both development and other research teams, as well as support, sales and other cross-functional teams

Qualifications

Required Qualifications

• 3+ years of experience in security research/analysis roles
• Vast experience in Malware research - Advanced static and dynamic analysis tools
• Experience in identifying, investigating, and responding to complex attacks
• In-depth knowledge of inner Windows operating system Internals - Memory layout, processes & threads, User&Kernel space, etc
• Experience in Python or other scripting languages
• Understanding of the threat landscape in terms of the tools, tactics, and techniques of attacks
• Excellent written and oral communication skills in English
• Strong attention to detail
• Experience in development of endpoint-based malware detection rules - big advantage
• Experience with investigative technologies such as SIEM, packet capture analysis, host forensics, and Endpoint Detection and Response tools - advantage
• Ability to work in a dynamic, fast-moving, and demanding environment - this role might rarely require working non-regular hours, including weekends and holidays - if needed

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected].

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.