You will be part of the team that develops the Intrusion Prevention System to power the Palo Alto Networks’s next generation firewall. The Decoder team is responsible for decoding network protocols and inspecting application traffic on enterprise customers’ networks.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Research networking protocols and related application networking behavior.
Research file types and file properties.
Research and provide defense mechanisms against popular protocol/firewall evasions
Develop protocol and file decoders, and integrate the detection solutions with Palo Alto Networks products
Build common services to support various network security services.
Requirements
BS/MS in Computer Science or Electrical Engineering or equivalent Military experience
MITRE is seeking an Operational Technology (OT) Cyber Threat Intelligence Lead to bridge the gap between deep OT threat intelligence and automated adversary emulation. The role involves analyzing real-world adversary TTPs targeting industrial control systems (ICS), SCADA, and Space OT environments.
Compensation
Salary compensation range and midpoint: $172,800 - $216,000 - $259,200 Annual
Responsibilities
Adversary Behavior Deconstruction: Analyze real-world ICS/OT threat intelligence (e.g., PIPEDREAM, INCONTROLLER, Industroyer) to identify specific adversary behaviors, target device types, and network communication patterns.
Emulation Team Alignment: Translate OT threat intelligence into concrete technical requirements, attack flows, and protocol parameters for developers building automated emulation capabilities (e.g., Caldera for OT).
OT Threat Tracking: Track and characterize advanced persistent threats (APTs) targeting critical infrastructure, defense industrial base assets, and space system OT environments using unclassified and classified intel sources.
Sponsor Program Guidance: Advise government sponsors and critical infrastructure owner/operators on developing OT-specific threat intelligence programs and adopting threat-informed defense strategies.
Risk & Susceptibility Analysis: Conduct OT-focused threat modeling, mission impact analyses, and cyber-physical risk assessments using frameworks such as ATT&CK for ICS and SPARTA.
Lead a threat monitoring and analysis team focused on continuous network security monitoring, threat detection engineering, and deep log/behavioral analysis.
Responsibilities
Design, implement, and lead the Threat Monitoring & Analysis strategy targeting Linux kernel integrity, network telemetry, and microservices security.
Map detection logic and alert coverage against established frameworks (e.g., MITRE ATT&CK).
Establish alert quality control standards to maintain a low false-positive rate and prevent analyst burnout across SIEM, NIDS/HIDS, and endpoint detection platforms.
Lead proactive threat-hunting exercises using low-level system telemetry (auditd, eBPF, network flow logs, and system call traces).
Serve as the senior escalation point to validate, scope, and classify security anomalies and suspected breaches.
Requirements
Nice to have: GIAC (GCIH, GCIA, GNFA)
Nice to have: CISSP
Nice to have: Certified Threat Intelligence Analyst (CTIA)
Nice to have: WORM or out-of-band security log pipelines
The Senior Cyber Solution Engineer is the technical architect and authority for the firm’s security services.
Compensation
Compensation at Morphworks/Arrowpoint varies depending on factors such as location, skillset, role and level of experience. A reasonable compensation range for this position is $110-130k, in addition to benefits including medical, dental, vision, long term and short term disability, 401(k) and PTO.
Responsibilities
Service Design: Mastery of NDR platforms and definition of "Gold Image" configurations for all client deployments.
Architecture & Automation: Build-out of complex API integrations between NDR tools and ticketing systems to streamline operations.
Strategic Advisory & Sales: Act as the technical authority during high-value sales calls and translate technical concepts (e.g., "lateral movement") into business-risk language for leadership.
Leadership: Demonstrated project management and team leadership experience in a customer-facing capacity.
Requirements
Master’s degree in Cybersecurity
MBA with a technical focus
Nice to have: Consulting and/or technical sales experience
The Cyber Solution Engineer is the frontline defender of the managed network environment, focusing on deployment, maintenance, and initial analysis of Network Detection and Response (NDR) technologies.
Compensation
A reasonable compensation range for this position is $65,000-85,000
Responsibilities
Deploy and optimize network sensors
Configure firewall/network settings for sensor installation
Perform daily health checks and troubleshoot sensor issues
Act as primary analyst for NDR alerts
Prepare weekly and monthly security posture reports
Requirements
Associate’s or Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology
Completion of a reputable Cybersecurity Bootcamp (e.g., SANS, Flatiron, or Cybrary)
The Intermediate Cyber Solution Engineer acts as the bridge between tactical operations and strategic defense, handling escalations, threat hunting, process codification, and mentoring junior staff.
Compensation
Compensation at Morphworks/Arrowpoint varies depending on factors such as location, skillset, role and level of experience. A reasonable compensation range for this position is 95,000-115,000k, in addition to benefits including medical, dental, vision, long term and short term disability, 401(k) and PTO.
Responsibilities
Serve as SME for complex NDR alerts
Conduct quarterly compromise assessments
Author runbooks and playbooks
Perform detailed log analysis and parsing
Translate technical findings into actionable playbooks
Requirements
Bachelor’s degree in a STEM field
Nice to have: Basic Python scripting
Nice to have: Threat hunting
Nice to have: Network admin experience
Nice to have: Experience with LogScale, Zeek, and/or Suricata