Remote Director, Incident Response & DFIR Strategy

Palo Alto Networks, Inc.; Canberra; Remote; AUD 180,000 - 280,000; Full time

Job summary

Palo Alto Networks is seeking a Technical Consulting Director for Unit 42 in Australia. You will lead incident response engagements, digital forensics, and ransomware recovery for our largest clients, guiding delivery teams and ensuring highest quality outcomes.

Based in Australia, you will partner with executive leaders to scale our consulting practice, mentor DFIR professionals, and drive innovation in automated IR and threat intel while engaging with CxO audiences and industry forums.

Qualifications

• 12+ years of professional experience in Incident Response and cybersecurity consulting.
• Proven leadership in establishing and managing cyber risk consulting businesses.
• Deep DFIR and network forensics expertise, including Windows malware forensics.
• Hands-on cloud experience with AWS or GCP and security investigations.
• Proficiency in Python and Golang for automation.
• Bachelor’s Degree in Computer Science or related field.
• CISSP or equivalent certifications.

Responsibilities

• Lead High‑Stakes Engagements: Oversee IR, forensics, and ransomware response for top clients.
• Expert Incident Command: Act as technical lead and incident commander, delivering findings to executives.
• Regional Strategy & Growth: Partner with the AU executive team to scale Unit 42’s practice.
• Service Innovation: Drive improvements and automation for IR and threat intel capabilities.
• Business Development: Collaborate on pipeline generation and proposal preparation.
• Team Leadership & Mentorship: Recruit, onboard and mentor DFIR talent.
• Thought Leadership: Represent Unit 42 at industry forums and publish whitepapers.

Skills

IR

DFIR

Leadership

Cloud security

Python

Go

Forensics

Public speaking

Education

Bachelor’s Degree in Computer Science or related field

Tools

Wireshark

Bro

Windows malware forensics

Job description

Palo Alto Networks is seeking a Technical Consulting Director for Unit 42 in Australia. You will lead incident response engagements, digital forensics, and ransomware recovery for our largest clients, guiding delivery teams and ensuring highest quality outcomes.

Based in Australia, you will partner with executive leaders to scale our consulting practice, mentor DFIR professionals, and drive innovation in automated IR and threat intel while engaging with CxO audiences and industry forums.