Staff Security Researcher

Your Career

You will be part of the team that develops the content to power the Palo Alto Networks next generation firewall. The content team is responsible for decoding network protocols, identifying applications and detecting threats on enterprise customers’ networks.

As a member of the content team, you have the opportunity to work on different projects to enable customers to have full visibility on their network as well as prevent exploits, APT attacks, etc.

Your Impact

• Research the root cause of publicly disclosed vulnerabilities and develop a detection method like IPS and ML detection
• Work on Zero-Day vulnerability detection and release the IPS solution to customers within 24 hours
• Reverse engineer software to discover new vulnerabilities
• Develop detection methodology for new attacking vectors
• Program on Linux and Windows systems for some creative projects to improve next-generation security technology

Requirements

Your Experience

• Team player, and good communication skills to work with cross-functional groups
• Understanding of exploit techniques, such as Stack/Heap Buffer Overflows, use-after-free, format string, XSS, SQL Injection, CSRF, MITM, DOS, etc.
• Strong understanding of basic network protocols, such as HTTP, UDP, FTP, SMTP, DNS, SMB, etc.
• Experience with AI/ML
• Experience in analyzing network traffic using tools like tcpdump and Wireshark.
• Familiar with Windows/Linux development environment
• Experience with programming in scripting languages (Bash, Python, Perl) - experience with PEN testing tools, such as Metasploit, Burp Suite, Nmap, etc., and experience with debugging tools, such as WinDbg, Olly Debug, GDB, etc. is a big plus
• BS/MS in Computer Science or Computer Engineering or related experience or equivalent military experience required
• Experience with CTF is a plus
• Security Blogs and Talks on the top security conference like Blackhat, Defcon are a big plus