Consulting Director, DFIR, Reactive Services (Unit 42)
Palo Alto Networks•Burbank, CA
•$183,000 - $252,000•Remote
About The Position
This is a senior-level consulting role leading cybersecurity incident response and breach investigations for Unit 42 clients. The role acts as both a strategic advisor and hands-on technical leader across industries and environments, driving outcomes on complex security incidents. The position is remote, but distance is no barrier to impact. Hybrid teams collaborate across geographies to solve big problems, stay close to customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
Requirements
- 10+ years of DFIR consulting experience (breach response, investigations)
- Proven leadership of technical incident response teams in high-pressure environments
- Deep expertise in forensic methodologies (chain of custody, disk/memory analysis)
- Hands-on experience with tools: EnCase, FTK, SleuthKit, Volatility (or equivalent)
- Strong operating system expertise (Windows, Linux, or macOS)
- Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience)
Nice To Haves
- Recognized industry leader (speaking, media, thought leadership)
- Strong client management + budget ownership experience
- Experience analyzing novel malware / advanced threats
Responsibilities
- Lead breach response engagements, providing both strategic direction and hands-on DFIR leadership
- Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
- Guide clients through complex incidents with tailored, high-impact solutions
- Stay current on threat landscape, vulnerabilities, and attacker techniques (TTPs, persistence methods)
- Perform and oversee forensic investigations (memory/disk acquisition, analysis) using tools like EnCase, FTK, Volatility
- Manage client relationships, lead technical discussions, and run multiple engagements concurrently
- Support business growth through client expansion (cross-sell/upsell) and new opportunity identification
Benefits
- Restricted stock units
- Bonus
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
