Senior Manager, Threat Intel Research

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Job Description

Your Career

We are seeking a Senior Manager, Cyber Threat Intelligence to lead our Fusion Intelligence Team (FIT), which is part of the Intel Response Unit within our broader Unit 42 Threat Intelligence organization. FIT’s mission is to conduct accelerated threat intelligence collection and analysis with a focus on pivoting from open-source intelligence (OSINT) to internal holdings to contextualize, cluster, and develop insights into emerging and ongoing threat activity. You will have the opportunity to collaborate with world-class researchers and engineers across Palo Alto Networks, ensuring your team's intelligence findings further additional cyber threat intel research, consultant engagements, customer and executive insights, and product integrations.

If you are an experienced cybersecurity professional and leader with a passion for threat intelligence, collaborating across research and product teams, and growing your team members, we invite you to join our dynamic organization.

Your Impact

As the Senior Manager of the Fusion Intelligence Team, your primary responsibilities will include:

1. Rapid OSINT fusion: Determine the credibility and relevance of OSINT and integrate it with other available data to build a more complete cyber threat intelligence picture. Enter priority intelligence findings, indicators of compromise (IOCs), and threat actor information into the organization's threat intelligence knowledge repository. Ensure continuous updates to threat actor, industry, region, and malware profiles. Continually enhance team workflows to improve the scalability and effectiveness of the team's analytical capabilities.

2. Leverage unique data holdings and partner across teams: Harness the full weight of the company's unique data holdings, including product telemetry, front line Incident Response (IR) data, and partner information. Utilize these resources to produce and communicate the most unique and valuable insights, enhancing the effectiveness and differentiation of our threat intelligence capabilities. Produce Intelligence Bulletins, Threat Briefs, and other sharable content based on unique findings derived from the team’s analysis. Partner with other research and product teams to build joint capabilities and ensure findings are leveraged to the full extent. 

3. People management and career development: Manage and mentor a team of analysts. Foster their professional growth, provide guidance, and facilitate skill development to ensure a high-performing and cohesive team.

4. Participate in rapid response efforts: Support the Intelligence Response Unit’s mission as the point organization for major cyber events (e.g. Log4j, SolarWinds) across all of Palo Alto Networks. Lead or assist with rapid response efforts, providing timely coordination across teams and supporting response actions with intelligence investigations.

5. Contribute to external engagement: Amplify Unit 42 presence and credibility in the marketplace through thought leadership, including via speaking engagements, publishing threat research, and media exposure.

Qualifications

Your Experience

• Deep technical experience in Cyber Threat Intelligence including actionable knowledge of cyber adversary groups, tactics, and techniques. 

• Ability to leverage multiple telemetry types and intelligence sources to generate unique insights into potential threats and associate malicious activity.

• Demonstrated expertise in building and mentoring effective cyber threat intelligence teams, cultivating a strong culture of collaboration, open communication, and the consistent sharing of threat insights and analytical methodologies. Committed to providing opportunities for professional development within the team.

• Demonstrated experience in identifying, analyzing, and implementing process improvements within cyber threat intelligence workflows to enhance efficiency, accuracy, and the overall quality of intelligence products and outcomes. Experience leveraging AI capabilities to support intelligence processes.

• Highly organized with the ability to manage multiple tasks, prioritize effectively, and triage competing demands in a fast-paced environment.

• Strong writing and presentation skills, with the ability to effectively communicate complex threat intelligence information to diverse audiences.

• Proficiency in developing and maintaining scripts to streamline intelligence workflows, enhance efficiency, and improve data accuracy. 

• Familiarity with Vertex Synapse preferred.

• Bachelor’s Degree or equivalent military experience - an advanced degree such as MS is a plus.

Additional Information

The Team

Unit 42 brings together our world-renowned threat researchers with an elite team of security consultants to create an intelligence-driven, response ready organization. The Unit 42 Threat Intelligence team provides threat research that enables security teams to understand adversary intent and attribution, while enhancing protections offered by our products and services to stop advanced attacks. As threats escalate, Unit 42 is available to advise customers on the latest risks, assess their readiness, and help them recover when the worst occurs.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $199,000 - $322,500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.