Sr Staff Security Researcher (Web Security)

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Description

Your Career

The Web Security Research team is responsible for delivering high quality AI powered solutions to prevent successful cyberattacks and protect our customers, with a special focus on malicious and phishing URL detection, browser, network and email security. 

We are looking for a motivated and creative Security Researcher to join our team to research, design, and develop innovative detection systems, ML models and infrastructure for protecting customers against constantly evolving online threats and attacks. 

Your Impact

• Track and research emerging online threats and innovate new AI-powered automated ways to identify malicious indicators used by malicious websites and URLs

• Leverage data-driven techniques and frontier technologies in ML and AI to build novel detection models for malicious URL detection and blocking

• Design, develop, test, threat prevention and detection systems to protect enterprise customers around the globe 

• Convert research results and discoveries into real-impact innovative products

• Implement and maintain complex software pipelines and data infrastructures with challenging requirements on high quality and performance

• Work across teams to deliver production-impact projects

Qualifications

Your Experience 

• Creative thinker and team player with a passion for data-driven security research, and building high quality, complex systems as a part of an incredible research team

• Strong Web Security background and expertise in detecting security threats over the Internet, such as, phishing, fraud, botnet, spam

• Experience with browser and/or email security is a plus

• Experience with malware traffic analysis, signature mining, sandboxing is a plus 

• Experience with crawling infrastructures and security scanners is a plus 

• Hands-on experience in applying Machine Learning within the domain of Web Security and building detection models

• Experience with Tensorflow, PyTorch, or Vertex AI

• Knowledge and experience with modern machine learning technique and algorithms (including NLP and OCR), workflows and pipelines to train and build models is a plus

• Strong engineering skills and ability to fastly learn and adapt to new programming languages and technologies

• Strong programming skills in Python and Shell scripting

• Advanced programming skills in JavaScript and Golang is a plus

• Experience with developing REST APIs and microservices is a plus

• Knowledge and experience with modern databases and Big Data tools, such as ELK stack, MySQL, MongoDB, Redis, Kafka, RabbitMQ, BigQuery, Bigtable is a plus

• Knowledge and experience with Docker and Kubernetes is a plus

• Experience with cloud computing platforms, such as GCP, AWS, Azure is a plus

• Must have MS/PhD or 2+ years of relevant industry experience or equivalent military experience required

• Strong research, communication and presentational skills

• Past work experience in early-stage, fast-growth startups is a plus

• Past experience on open source projects is a plus

Additional Information

The Team

To stay ahead of the curve, it’s critical to know where the curve is, and how to anticipate the changes we’re facing. For the fastest growing cybersecurity company, the curve is the evolution of cyberattacks, and the products and services that proactively address them. Our engineering team is at the core of our products – connected directly to the mission of preventing cyberattacks. They are constantly innovating – challenging the way we, and the industry, think about cybersecurity. These engineers aren’t shy about creating products to solve problems no one has tackled before. They define the industry, instead of waiting for directions. We need ind