P

Palo Alto Networks

Builds cybersecurity tools for organizations

Senior Threat Hunter

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • At least 3 years of relevant cybersecurity experience, preferably in threat hunting, incident investigation, security operations center analysis, detection engineering, digital forensics and incident response, managed detection and response, or a similar security operations role.
  • Strong understanding of the evolving threat landscape, including attack tools, tactics, techniques, networking, and security fundamentals.
  • Experience investigating suspicious activity, security incidents, or targeted threats across endpoints, networks, identity, and cloud.
  • Ability to work independently, make sound investigative decisions, and escalate findings that require additional review or urgent action.
  • Experience handling customer-facing or stakeholder-facing security requests, including writing clear communications, investigation summaries, and recommendations.
  • Understanding of attacker behaviors, including attack vectors, execution, persistence, privilege escalation, lateral movement, credential theft, command and control, and data exfiltration.
  • Background writing, modifying, or executing detections, hunting queries, or log-based investigations.
  • Familiarity with organizational cybersecurity measures, including protective tools, response actions, and remediation techniques.
  • Excellent written and oral communication skills in English.
  • Strong attention to detail and ability to document investigation logic, findings, and conclusions clearly.
  • Knowledge of threat-hunting methodologies and ability to learn novel techniques.
  • Ability to simplify and clarify complex ideas.
  • Experience writing technical reports, investigation summaries, or customer-facing security analysis.
  • Ability to analyze and understand the infrastructure, behaviors, and objectives of malicious campaigns.
  • Ability to work independently and adapt to changing priorities.

Responsibilities

  • Handle inbound customer communications and collaborate with customers.
  • Provide support and assistance to the Managed Detection and Response team for hunting-related activities.
  • Provide coverage for core threat-hunting activities.
  • Respond to customer hunting-related requests and issues related to suspected security incidents.
  • Execute existing threat-hunting reports and workflows, investigate results, and support timely customer reporting.
  • Investigate hunting leads based on indicators of compromise, threat intelligence, and internal detections.
  • Monitor the threat landscape and prepare initial context for emerging campaigns so the global team can continue deeper investigation during the week.
  • Escalate major or high-impact security events to leadership in a timely and appropriate manner.
  • Provide ongoing feedback on findings, hunting reports, queries, and operational workflows to support continuous improvement.
  • Work flexible 24/7 rotational shifts depending on business demands.
  • Conduct threat-hunting activities across a wide variety of data sources, execute queries, perform data analysis, and interpret results to identify suspicious activity and potential threats.
  • Work across cybersecurity domains including endpoint, network, cloud, identity, and third-party vendor data sources.
  • Participate in improving hunting reports, queries, workflows, and operational processes.

Desired Qualifications

  • Experience in an incident-response environment.
  • Proficiency in Python and SQL.
  • Familiarity with malware analysis, such as malicious-script deobfuscation.

About the Company

Palo Alto Networks

Builds cybersecurity tools for organizations

Palo Alto Networks builds cybersecurity hardware and software for businesses and public institutions, protecting their networks, cloud workloads and digital identities. Its portfolio combines network firewalls with tools that detect attacks, investigate security alerts and manage access to sensitive systems. Security teams use these products across offices, data centers and cloud environments, with shared data and automated workflows connecting the company's platforms. It earns revenue from appliance sales and software licenses, plus subscriptions and support contracts that keep protections and services active over time. Palo Alto Networks began operations in 2005 and is headquartered in Santa Clara, California.

Company size
10,001+
Company stage
IPO
Headquarters
Santa Clara, CA
Founded
2005

Recently Posted Jobs

Explore more opportunities at Palo Alto Networks

See more jobs