MDR Shift Analyst (Unit 42)

Job Summary We are seeking a driven and analytical MDR Shift Analyst to join the Unit 42 Managed Detection and Response (MDR) team at Palo Alto Networks. In this role, you will help monitor customer environments, detect potential threats, and respond to cyber incidents affecting our customers’ internal systems and business operations. As part of our MDR team, you will analyze security alerts generated by industry-leading tools such as Cortex XDR, investigate suspicious activity, and collaborate with internal security teams to contain and remediate incidents. This position requires flexibility to work in a 24x7 rotational shift schedule based on business and customer needs. The role is remote and may also involve hybrid collaboration across geographies. Your Impact Monitor customer environments and investigate alerts generated by security technologies including Cortex XDR and other endpoint and network detection platforms. Detect, triage, and respond to cybersecurity incidents impacting customer environments. Own and manage the incident lifecycle, from initial detection through investigation, containment, remediation, and closure. Perform threat analysis to identify malicious activity, suspicious behaviors, and potential security incidents. Collaborate with Security Research, Threat Intelligence, and Threat Hunting teams to detect and respond to emerging threats. Provide clear and actionable updates to internal teams and customers regarding incident findings and remediation recommendations. Document incident investigations, response actions, and security findings to maintain strong operational visibility. Provide feedback to product, research, engineering, and threat teams to help improve detection capabilities across Palo Alto Networks products. Contribute to operational improvements by helping refine investigation processes, playbooks, and response workflows. Work closely with a global team supporting customers across different industries and regions. Qualifications 3+ years of experience working in a Security Operations Center (SOC), Incident Response (IR), or Managed Security Services environment. Hands‑on experience with security technologies such as EDR (Endpoint Detection and Response) , SIEM platforms , SOAR platforms , Firewall technologies . Strong understanding of cyberattack techniques, threat vectors, and common attack patterns. Experience investigating security alerts and performing incident triage. Ability to analyze logs, endpoint activity, and security telemetry to determine potential threats. Excellent written and verbal communication skills in English. Preferred Qualifications Experience working with Cortex XDR or Cortex XSOAR . Familiarity with malware analysis or reverse engineering concepts. Security certifications such as CEH (Certified Ethical Hacker) , CompTIA CySA+ , and other relevant cybersecurity certifications. Experience working in a managed security or MDR environment. Military cyber or intelligence experience. Additional Information This role operates in a 24x7 rotational shift model. Candidates must be comfortable working in a fast‑paced operational security environment. Opportunity to work alongside industry‑leading security researchers and threat analysts within Unit 42. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non‑sales roles) or base salary + commission target (for sales/com‑missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here ( $87,000.00 - $139,500.00/yr Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at View email address on click.appcast.io. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position. #J-18808-Ljbffr