MDR Analyst, Unit 42

Your Career

We are seeking a driven problem solver to join our Unit 42 MDR team. Our team is responsible for customers internal security monitoring, threat hunting and incident response. As a MDR Analyst, we will rely on you to detect and respond to cyber incidents facing customers internal business.

The ideal candidate is a quick learner and good communicator who will be able to follow established processes for analyzing threat alerts that fire from our Cortex XDR. The candidate should be a creative thinker who takes pride in solving tough problems.

Your Impact

• Join a new emerging team who is going to be part of Palo Altos Unit 42, Working closely with global customers providing the best security in the market
• Own an incident lifecycle from outbreak to full remediation
• Provide critical feedback to the different product, research and engineering and threat hunting teams to help improve the products for the entire Palo Alto Networks customer base
• Work closely with Security Research, Threat Intelligence and Threat Hunting teams to remediate and detect new emerging threats
• This position requires flexibility to work primarily during morning and afternoon hours however, occasional night shifts may be required depending on business demands

Your Experience

• 3+ years of experience in a multi tiered SOC/IR is a must
• Experienced with Technologies such as EDR, SIEM, SOAR, FW
• A well established familiarity with attack trends and vectors
• Excellent written and oral communication skills in English
• Some degree of Malware Analysis or equivalent military experience - An advantage
• CEH / CompTIA CYSA+ certifications - An advantage
• Hands-on experience with Cortex XSOAR or Cortex XDR - An advantage

The Team

The team youll lead helps protect customers by identifying the most sophisticated & stealthy attacks in their environment. The team does so by leveraging the Cortex product suite as well as unique tools, methodologies and techniques.

Cortex provides enterprise-scale detection and response that runs on integrated endpoint, network and cloud data reduce the noise and focus on real threats. This team works closely with the different product teams and helps improve each and every product by providing first-hand insights into how the product is used and how it can perform even better.