Senior Linux Detection Researcher (Cortex)

At Palo Alto Networks®, we're united by a shared mission-to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That's why most of our teams work from the office full time, with flexibility when it's needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

The team is responsible for developing and improving our Linux anti-malware prevention. This includes having top-notch knowledge about the latest malware families in the wild, Linux internals, different attack frameworks and hacktools. As part of this, the team analyzes customer data and issues to prevent malicious activities in our customer's environment, and help to improve the product.

Key Responsibilities

• Research and analyze malware and keep up-to-date on the most recent tactics and techniques used in the wild
• Create behavioral-based protection that enhances our product's coverage
• Leverage Palo Alto Networks massive collection network to identify coverage gaps and emerging threats
• Assist in the design, research, evaluation and implementation of new security technologies and features
• Work in close coordination with other teams, including both development and other research teams, as well as support, sales and other cross-functional teams

Required Qualifications

• 3+ years of experience in security research/analysis roles
• Vast experience in Malware research - Advanced static and dynamic analysis tools
• Experience in identifying, investigating, and responding to complex attacks
• In-depth knowledge of inner Linux operating system Internals - processes & threads, User & Kernel space, eBPF, Cloud Native technologies, etc.
• Experience in Python or other scripting languages
• Understanding of the threat landscape in terms of the tools, tactics, and techniques of attacks
• Excellent written and oral communication skills in English
• Strong attention to detail
• Ability to work independently in a dynamic, fast-moving, and demanding environment - this role might occasionally require working non-regular hours, including weekends and holidays - if needed

• Experience in development of endpoint-based malware detection rules - big advantage