Why Threat Intelligence: A Conversation With Unit 42 Interns

Meet the Next Generation of Threat Intelligence

Unit 42’s Threat Intelligence teams work to proactively discover, analyze and contextualize sophisticated cyberthreats to empower both Palo Alto Networks products and the broader security community.

To gain insight into the scope and responsibilities of these teams, I sat down with two Unit 42 interns, Gabrielle Calderon and Sakthi Vinayak. Sakthi is a Threat Research Intern and Gabrielle is a Malware Reverse Engineering Intern. Over the 12 week span of their internship, they’ve worked side-by-side with professionals on expansive projects, deepening their understanding of the ever-evolving cybersecurity landscape.

Walk me through your background and what led you to Unit 42.

Sakthi: Back home in India, I was drawn to cybersecurity after many of my loved ones had been tricked by phishing scams during COVID-19. I liked threat intelligence specifically because of its similarities to true crime documentaries. True crime goes into the motivations and methods of criminals while threat intelligence examines the "why" and "how" of threat actors operating in cyberspace.

After hearing Unit 42 speakers at my university, I realized Unit 42 was exactly the space to gain more hands-on experience in the threat intelligence field. I then knew that I wanted to apply and be part of a team that’s actively shaping the future of threat intelligence.

Gabrielle: I come from a computer engineering background where I focused on cybersecurity and have worked various IT jobs like being an IT worker and a SOC analyst. It’s always been really important for me to gain practical experience so I've tried taking as many classes in undergrad and grad school as possible, including malware reverse engineering ones.

My previous work experiences exposed me to Palo Alto Networks products so I was familiar with the company. I knew I wanted security related jobs and when I saw the posting for a malware reverse engineering role, I thought it would be perfect because that’s exactly what I had been focusing on.

What do you do in your role and how has it furthered your passion for threat intelligence?

Sakthi: In my role, I’ve mainly focused on automating manual data ingestion and enrichment processes to free up time for deeper research and analysis. Over the course of twelve weeks, I’ve worked on three key projects: mechanizing the data ingestion workflow, implementing a fidelity scoring framework, and building a dashboard to analyze knowledge repository data for identifying trends and gaps.

These projects have really strengthened my passion for threat intelligence by showing me the complexity and depth of the field, as well as how engaging and impactful the work can be. I've learned so many valuable insights by shadowing and collaborating with professionals in different teams. I feel like I’ve really been able to apply my classroom knowledge and gain technical expertise, which has been immensely important.

Gabrielle: There are two primary tracks that I focus on in my position. The first is analyzing malware tickets to determine the level of response needed to address them. The second is developing a tool to help automate identifying the different malware families and pulling out the indicators of compromise automatically.

I really enjoy working on real-world, up-to-date cybersecurity challenges that tie directly to current events and global conflicts. It’s also super exciting to be contributing to cutting-edge and scalable solutions that I once thought could not be automated.

What has your experience been like with Unit 42, and how has the team supported your growth in threat intelligence?

Sakthi: I’ve really appreciated the supportive and growth-oriented culture of this internship. Everyone I've talked to, including people from other teams, have been so encouraging in helping me with tasks, sharing knowledge and investing in my development. This environment has not only enhanced my understanding of threat intelligence but also expanded my exposure to AI, new platforms and a wide range of technologies.

Gabrielle: Something that has stood out to me during this internship is how everyone in Unit 42 shares such a genuine enthusiasm for their work. Individuals are encouraged to solve problems and take initiative, even if it falls outside their original role. That kind of trust and freedom to innovate is something I haven’t experienced before, and it’s really encouraged my passion for learning and experimenting.

Final Thoughts

Listening to Sakthi and Gabrielle’s internship experience made it clear just how impactful an internship at Unit 42 can be. As a Unit 42 intern myself, I can further validate the supportive environment, constant opportunities to learn and obtain feedback, and hands-on exposure. To learn more about fostering careers in cybersecurity, discover how Palo Alto Networks supports early career development.