Principal Consultant, DFIR, Reactive Services – Weekend Shift

Palo Alto Networks

Principal Consultant delivering expert-level incident response and digital forensics services at Palo Alto Networks. Leading investigations, providing guidance, and mentoring across various industries.

Posted 6/11/2026full-timeRemote • California • 🇺🇸 United StatesLead💰 $151,000 - $208,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxMacOS

About the role

Key responsibilities & impact

Lead digital forensics and incident response investigations across enterprise environments.
Serve as a technical lead on incident response engagements.
Conduct host, network, and cloud investigations to identify root cause, attacker activity, and scope of compromise.
Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.
Utilize industry-standard DFIR tools and methodologies to support incident containment and recovery.
Deliver clear findings and remediation guidance to clients and stakeholders.
Support development of DFIR playbooks, tools, and investigative methodologies.
Mentor team members and contribute to knowledge sharing across Unit 42.

Requirements

What you’ll need

Bachelor's degree or equivalent practical experience.
6–8+ years of experience in DFIR, incident response, security operations, or related cybersecurity disciplines.
Experience investigating ransomware, intrusion activity, and other enterprise-scale security incidents.
Strong understanding of forensic acquisition, evidence handling, and investigative methodologies.
Hands-on experience with DFIR tools such as EnCase, FTK, SleuthKit, Volatility, or equivalent frameworks.
Experience investigating Windows, Linux, and macOS environments.
Strong analytical, problem-solving, and client-facing communication skills.

Benefits

Comp & perks

Employee benefits
Opportunity for professional development
Flexible work arrangements

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

digital forensicsincident responseforensic acquisitionevidence handlinginvestigative methodologiesransomware investigationsecurity operationsanalytical skillsproblem-solving

Soft Skills

communication skillsmentoringknowledge sharing