Skip to main content

Palo Alto Networks is on a mission to keep the digital world safe, and this extends to job seekers as well. Please be mindful of a current bad actor practice of recruiters impersonating us. If you receive an email from someone who does not have a @paloaltonetworks.com email address, please do not respond or engage.

Two women reviewing a computer screen

Job Details

Revolutionizing protection.

Define what’s next in cybersecurity.

Security Research Manager - Investigation Algorithms (Cortex)

Tel Aviv, Tel Aviv, Israel Product Engineering Ref ID: JR-014863
Apply

Current Employees, apply here

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

Job Summary

Lead and grow the team in charge of researching and developing Autopilot, an innovative product for graph-based fully-autonomous investigation and response (Over the Cortex platform).

As the manager of the Autopilot team, you'll lead a team of security researchers, set the project's technical vision and standards, and own its success.

You will lead an innovative team on the research, design, and development of a new graph-oriented security product. Creating investigation modules that allow Autopilot to autonomously detect, investigate, and respond to advanced threats at a massive scale.

You'll work closely with other development and product teams to turn a successful POC into a full-fledged product, staying agile in a dynamic environment and using data-driven empirical research to determine and drive the project in the best direction.

You’ll analyze everything from new malware behaviors to attacker techniques and process activity in enterprise-scale networks, using data collected from across millions of endpoints. Your work will span identifying attack patterns and uncovering statistical anomalies, as well as validating that the system responds effectively to real-world attacks and APT campaigns using production data.

Key Responsibilities

  • Lead and developa team of security researchers, providing mentorship, guidance, and continuous feedback to help them grow their careers (Manage the team, develop the people).

  • Drive the research strategy and executionfor new autonomous methods for investigating and responding to targeted attackers, leveraging large-scale XDR data and graph-based algorithms.

  • Ensure collaboration with engineering, product, and other research teams, acting as a key interface to push the project forward and align on cross-functional goals.

  • Direct the team's work on deep, hands-on investigations of real incidents to reinforce the best investigation and response approach, leveraging a combination of os-internals, TTPs, semi-labeled data, and large-scale statistical methods.

  • Foster a disruptive environment that innovates using advanced techniques such as graph algorithms, machine learning, and LLM agents to mimic and scale human security analyst workflows.

Qualifications

Required Qualifications

  • Experience managing a technical research or R&D team.

  • 5+ years of experience in security or threat research, with a proven track record of delivering actionable insights and real-world impact.

  • Experience driving projects from concept to execution with a strong sense of ownership.

  • Intimate knowledge and understanding ofattack methods and techniques (TTPs) over endpoints and enterprise networks.

  • Technical proficiency in Python, including experience providing code reviews for team members and adhering to best practices.

  • Ability to work with and extract meaningful insights from large-scale datasets, including strong foundational knowledge of basic statistics.

  • Excellent people management, verbal, and written communication skills, with a proven ability to collaborate across organizational boundaries.

Preferred Qualifications

  • In-depth knowledge of the inner workings of operating systems (especially Windows internals).

  • Experience in designing and implementing behavioral detection/investigation systems.

  • Experience working with graph DB and algorithms

  • Advanced background in statistics, data studies, or machine learning

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.
Apply

Current Employees, apply here

Stay connected to our opportunities with the latest news and event invites.

Interested In

By signing up, I acknowledge I have read the Palo Alto Networks privacy policy, and I wish to receive email communications and SMS communications. I understand I can opt-out from receiving email and SMS communications at any time.

Unlock career insights and get exclusive information tailored just to you.