Incident Response Lead & Digital Forensics Expert

Alto; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Palo Alto Networks in the United Kingdom is seeking a client-facing Principal Consultant to lead reactive services engagements, manage incidents, and guide remediation with expert forensics.

The role involves working directly with customers to improve security posture, mentoring junior staff, and coordinating across internal and external teams. Eligible for UK SC and with remote flexibility, this position suits a strategist with hands-on incident response experience.

Qualifications

• Bachelor's degree with 8 years of experience, or Master's with 6 years, or PhD with 3 years in Information Security / related fields.
• Direct experience in incident response or digital forensics consulting.
• Proficiency with host-based forensics and data breach response methodologies.
• Hands-on experience with forensic tools such as EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, or Wireshark.
• Ability to travel as needed, up to 20%.

Responsibilities

• Lead incident response engagements, including scoping work and guiding clients through investigations.
• Perform host-based forensics and data breach analysis on multiple OS platforms to identify IOCs.
• Review logs (firewall, web, database) for evidence of malicious activity and attack vectors.
• Investigate data breaches using forensic tools to determine source and scope of compromises.
• Provide actionable remediation recommendations and security posture improvements.
• Mentor junior team members and collaborate with internal/external stakeholders to deliver solutions.

Skills

Leadership

Client interaction

Mentorship

Communication

Education

Bachelor's degree in Information Security / Computer Science / Digital Forensics

Master's degree in Information Security / Computer Science / Digital Forensics

PhD in Information Security / Computer Science / Digital Forensics

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

Job description

Palo Alto Networks in the United Kingdom is seeking a client-facing Principal Consultant to lead reactive services engagements, manage incidents, and guide remediation with expert forensics.

The role involves working directly with customers to improve security posture, mentoring junior staff, and coordinating across internal and external teams. Eligible for UK SC and with remote flexibility, this position suits a strategist with hands-on incident response experience.