Customer Focus Analyst (Unit 42 MDR) - Remote

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job DescriptionThe Team Unit 42 is the global threat intelligence team at Palo Alto Networks. We believe threat intelligence should be shared and available to all within the industry. We deliver high-quality, in-depth research on adversaries, malware families, and attack campaigns. Our analysts uncover and document adversary behaviors and then share playbooks that give insight into the various tools, techniques, and procedures threat actors execute to compromise organizations. If you’re looking for a career with access to the brightest minds in cybersecurity, you’ve found it. We have a hunger for researching, hunting out the world’s newest threats and sharing them with our industry to make the digital world a safer place. You will be part of a growing, passionate, and dynamic team with an opportunity to work on challenging and exciting projects — centered on what we believe is one of the most significant mission statements in the world. We also strive to be the most people-centric company ever! That means we’re constantly working to make your experience amazing, and you are part of the team breaking boundaries of what the workplace can be! Job Summary Unit 42’s Managed Detection and Response (MDR) service is growing fast — and we’re building a customer-centric team that blends technical expertise with direct customer engagement. As a Customer Focus Analyst, you’ll act as the front line of communication between our MDR analysts and our customers, helping bridge the gap between incident response and customer understanding. You’ll not only support investigations and incident triage, but also help onboard customers, answer technical questions about reports, alerts, and the service, and manage ongoing communications to ensure clarity, alignment, and satisfaction. This role is ideal for someone who is technical at their core, but enjoys customer interactions, driving clarity, and ensuring our partners feel confident and supported in their cybersecurity journey. Key Responsibilities

• Be part of a customer-focused sub-function of the Unit 42 MDR team, dedicated to proactive communication and technical guidance
• Support onboarding activities for new customers
• Monitor incoming communication from customers (e.g., via email, comments), triage and route issues as needed, and answer technical questions around reports, alerts, and recommendations
• Collaborate with MDR analysts to ensure the customer’s technical questions about incidents or threats are fully addressed
• Own the customer communication lifecycle during ongoing incidents — ensure timely updates, clarity, and alignment on next steps
• Help drive consistency and quality in how incidents and threat intelligence are communicated externally
• Escalate and advocate for customer issues internally across Product, Engineering, and the broader Unit 42 team

QualificationsPreferred Qualifications

• 2+ years of experience in a customer-facing cybersecurity role such as professional services, customer success or customer support — must , Tier 1/2 SO analyst experience - advantage,
• Hands-on experience with tools such as EDR, SIEM, SOAR, or XDR
• Strong customer communication skills — verbal and written — with the ability to explain complex technical details clearly
• Experience reviewing, drafting, or presenting incident reports and security findings
• Familiarity with Cortex XDR or Cortex XSOAR — a strong advantage
• Experience onboarding new security services or clients — an advantage

Additional InformationSalary Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $104500/YR - $169100/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.