Palo Alto Senior Security Researcher - ITDR Cortex 

Israel, Tel Aviv District, Tel Aviv-Yafo 

386470759

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats.

Your Impact

• Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments.
• Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior.
• Develop and refine statistics-based classification algorithms and techniques to create and improve detection models.
• Research specific scenarios to enhance our model's capabilities.
• Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product.
• Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats.

Your Experience

• At least 5 years’ experience with Active Directory security and identity related attacks.
• 2+ years of experience with Entra ID (formerly Azure AD) OR SAAS application - Advantage
• In-depth knowledge of the inner-workings of operating systems
• In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc.
• In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc.
• Experience with red-teaming / pentest of Entra ID - Advantage
• At least 2 Years of experience coding Python - Advantage
• Strong knowledge of SQL language - Advantage
• Experience with machine learning / data analysis / cloud infrastructure / security - Advantage
• Ability to drive and own projects from start to finish.
• Independent and a team player, a critical thinker.

All your information will be kept confidential according to EEO guidelines.