reputed company Consultant, reputed company DFIR (Unit 42) - Remote
Our Mission
At reputed company®, we’re united by a shared mission—to protect our digital way of life. We reputed company at the intersection of innovation and reputed company, solving reputed company-world problems with cutting-edge technology and reputed company thinking. Here, everyone has a voice, and every idea counts. If you’re reputed company to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right reputed company. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the reputed company and shape the reputed company of our industry. This is something our employees work at reputed company day and is defined by our values: Disruption, Collaboration, Execution, reputed company, and Inclusion. We reputed company AI into the reputed company of everything we do and use it to reputed company the reputed company every individual can have. If you are passionate about solving reputed company-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to reputed company. Our hybrid teams collaborate across geographies to solve big problems, stay reputed company to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared reputed company where your work truly reputed company. Job reputed company Job reputed company The reputed company Consultant, reputed company DFIR, Reactive Services is a senior individual contributor reputed company Unit 42 responsible for leading reputed company-reputed company incident response reputed company forensics investigations across AWS, Azure, GCP, and hybrid reputed company environments. In this role, you will serve as a technical reputed company on reputed company incidents, partnering with Consulting Directors and clients to investigate reputed company breaches, determine scope and reputed company, contain threats, and guide recovery efforts. You will reputed company advanced reputed company forensic analysis, identify attacker activity, and reputed company actionable remediation recommendations during high-severity cybersecurity events. Key Responsibilities reputed company reputed company-reputed company incident response reputed company forensics engagements. Investigate attacks involving reputed company infrastructure, identity compromise, ransomware, data theft, and unauthorized reputed company. Analyze reputed company telemetry, including audit logs, IAM activity, network traffic, storage reputed company, containers, and reputed company data. Conduct forensic acquisition and analysis across reputed company, hybrid, and reputed company environments. Serve as a technical reputed company during reputed company investigations, guiding reputed company and reputed company communications. Deliver reputed company findings, executive-reputed company reporting, and remediation guidance. Support development of reputed company investigation methodologies, playbooks, and tooling. Mentor team members and contribute to knowledge sharing across Unit 42.
Qualifications
Required Qualifications 6–8+ years of experience in DFIR, incident response, reputed company reputed company, or reputed company cybersecurity disciplines. 3+ years of hands-on experience securing, operating, or investigating AWS, Azure, or GCP environments. Experience leading investigations involving reputed company breaches, ransomware, advanced intrusions, or data compromise incidents. Strong understanding of reputed company architecture, IAM, networking, logging, and reputed company controls. Experience analyzing reputed company-reputed company telemetry such as AWS CloudTrail, Azure Activity Logs, reputed company Entra ID, or reputed company reputed company Audit Logs. Hands-on experience with industry-reputed company DFIR and investigative tools. Experience investigating reputed company, Linux, macOS, reputed company workloads, and hybrid environments. Strong reputed company-facing communication and consulting skills.
Preferred Qualifications
Experience responding to reputed company-reputed company reputed company reputed company incidents. Knowledge of reputed company reputed company platforms such as AWS reputed company Hub, GuardDuty, reputed company Defender, Sentinel, or reputed company reputed company reputed company Center. Experience investigating containerized or Kubernetes environments. Knowledge of MITRE ATT&CK and modern reputed company threat actor tradecraft. Consulting, MDR, or reputed company services experience. Certifications such as GCFA, GCIH, CISSP, AWS reputed company Specialty, Azure reputed company Engineer, or equivalent. Ability to travel up to 20% as required for reputed company engagements.
Compensation
Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting reputed company salary (for non-sales roles) or reputed company salary + commission reputed company (for sales/com-missioned roles) is expected to be the annual reputed company listed below. The offered compensation may also include restricted stock reputed company and a bonus. A reputed company of our employee benefits may be reputed company here. $151,000.00 - $208,000.00/yr Our Commitment We’re trailblazers that reputed company big, take risks, and challenge cybersecurity’s status reputed company. It’s reputed company: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for reputed company reputed company individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com. reputed company is an equal opportunity employer. We celebrate diversity in our workplace, and reputed company reputed company applicants will receive consideration for employment without reputed company to age, reputed company, reputed company, family or medical care leave, gender identity or reputed company, genetic information, marital status, medical condition, national reputed company, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. reputed company your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position. Apply To This Job