Consulting Director, DFIR

Summary

Join Palo Alto Networks® as a Consulting Director, Reactive Services and provide expert-level cybersecurity and data breach response guidance to Unit 42 clients. You will be the client’s cybersecurity advocate, offering strategic and technical leadership. This senior-level consulting position requires 10 years of hands-on experience in digital forensics and incident response, along with strong leadership and communication skills. You will lead technical breach response teams, manage complex budgets, and contribute to business development. The role involves up to 20% travel and requires a strategic mindset with a detail-oriented approach. Palo Alto Networks offers a competitive salary, benefits, and a supportive work environment.

Requirements

• Experience with forensic processes and procedures (chain of custody, computer acquisition techniques, and memory acquisition techniques)
• Experience using forensics tools such as EnCase, FTK, SleuthKit, Volatility, etc
• Analysis experience and operational understanding of one or more major operating systems (Microsoft Windows, Linux, or Mac)
• Knowledge of common malware persistence mechanisms
• Experience identifying and triaging malware
• 10 years of hands-on consulting experience in digital forensics, and incident response
• Strategic mindset but also detail-oriented and hands-on ability to lead high-level discussion on DFIR technology strategy and approach both internally and externally
• Demonstrated self-starter with intellectual curiosity and ability to adapt to change
• Ability to work quickly, willingness to work on ad hoc assignments, work independently or leading teams as needed
• Strong written and verbal communication skills
• Ability to develop unique and creative solutions to problems on the fly
• Willingness to learn new technologies and techniques to solve complex customer issues
• Ability to manage clients, lead meetings, and manage multiple project teams concurrently
• Ability to quickly develop and maintain rapport with clients
• Demonstrated ability to cross-sell or upsell existing clients and generate new business

Responsibilities

• Provide expert-level guidance on all areas of cybersecurity and data breach response to Unit 42 clients across a wide array of industries, geographies, and organizational structures
• Be the client’s advocate for cybersecurity and provide strategic and technical leadership in this area
• Maintain hyper-current knowledge of extant vulnerabilities and threat landscape
• Lead technical breach response teams in fast-paced environment
• Manage complex budgets
• Allocate staff to various projects quickly and efficiently
• Willingness to travel as required (up to 20%) to support leadership, customer briefings, planning and other activity as needed

Preferred Qualifications

Industry-recognized inspiring leader with media and public speaking experience, deeply embedded in information security community

Benefits

• Competitive salary ($183000 - $252000/YR)
• Restricted stock units
• Bonus
• FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees
• Mental and financial health resources
• Personalized learning opportunities