Palo Alto Networks
Consulting Director, DFIR, Reactive Services (Unit 42)
$190K–$261K
Burbank, United States of America · Yes · Director · Full-time · Posted Oct 1, 2026
- Experience
- 10+ years of DFIR consulting experience; education alternatives: Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience).
- Education
- Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience).
- Visa sponsorship
- No immigration sponsorship; the company will not sponsor applicants for work visas for this position.
About the job
Leads Unit 42 client breach-response engagements and forensic investigations, combining strategic advice with hands-on digital forensics and incident response (DFIR) leadership.
What you'll do
- Lead breach-response engagements and technical incident-response teams; perform and oversee forensic investigations.
- Advise clients on incident response, digital forensics, and cyber risk, while managing relationships and concurrent engagements.
- Support business growth through client expansion and identification of new opportunities.
What they ask for
- 10+ years of DFIR consulting experience in breach response and investigations.
- Proven leadership of technical incident-response teams in high-pressure environments, with expertise in forensic methodologies.
- Hands-on experience with EnCase, FTK, SleuthKit, Volatility, or equivalent; expertise in Windows, Linux, or macOS.
- Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience).
Nice to have
- Recognized industry leader through speaking, media, or thought leadership; client management and budget ownership experience.
- Experience analyzing novel malware or advanced threats; comfortable with up to ~20% travel.
Pay
$189,600.00 - $260,700.00/yr (base salary)
Tools
EnCase, FTK, SleuthKit, Volatility, Windows, Linux, macOS
Model-written summary · the original posting is authoritative