Consulting Director – Reactive Services (Unit 42)

Palo Alto Networks • Burbank, CA

9d • Remote

About The Position

Senior-level consulting role leading cybersecurity incident response and breach investigations for Unit 42 clients. Acts as both a strategic advisor and hands-on technical leader across industries and environments, driving outcomes on complex security incidents.

Requirements

• 10+ years of DFIR consulting experience (breach response, investigations)
• Proven leadership of technical incident response teams in high-pressure environments
• Deep expertise in forensic methodologies (chain of custody, disk/memory analysis)
• Hands-on experience with tools: EnCase, FTK, SleuthKit, Volatility (or equivalent)
• Strong operating system expertise (Windows, Linux, or macOS)
• Degree: Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience)

Nice To Haves

• Recognized industry leader (speaking, media, thought leadership)
• Strong client management + budget ownership experience
• Experience analyzing novel malware / advanced threats
• Comfortable with up to ~20% travel

Responsibilities

• Lead breach response engagements, providing both strategic direction and hands-on DFIR leadership
• Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
• Guide clients through complex incidents with tailored, high-impact solutions
• Stay current on threat landscape, vulnerabilities, and attacker techniques (TTPs, persistence methods)
• Perform and oversee forensic investigations (memory/disk acquisition, analysis) using tools like EnCase, FTK, Volatility
• Manage client relationships, lead technical discussions, and run multiple engagements concurrently
• Support business growth through client expansion (cross-sell/upsell) and new opportunity identification

What This Job Offers

• Job Type: Full-time
• Career Level: Director