Remote Incident Response Lead — Principal Consultant

Palo Alto Networks; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Palo Alto Networks is seeking a client-facing Principal Consultant in the UK to lead and deliver reactive incident response engagements for diverse customers. You will manage engagements from scoping through containment and remediation, guiding clients to strengthen their security posture.

You will work with cross-functional teams, apply forensic tools to identify IOCs and attack vectors, and mentor junior staff. Travel up to 20% is required, with impact across geographies.

Qualifications

• Bachelor’s degree with 8+ years of experience in information security or related field.
• Or Master’s degree with 6+ years, or PhD with 3+ years in related field.
• Direct experience in incident response or digital forensics consulting.

Responsibilities

• Manage and lead incident response engagements, including scoping work, guiding clients through forensic investigations, and containing security incidents.
• Perform reactive incident response and host‑based analysis on Windows, Linux, and Mac OS X systems to identify indicators of compromise (IOCs).
• Examine firewall, web, database, and other log sources to identify evidence of malicious activity and attack vectors.
• Investigate data breaches using forensic tools like EnCase, FTK, X-Ways, SIFT, and Splunk to determine the source and scope of compromises.
• Provide clients with clear, actionable recommendations for long‑term remediation and security posture improvement.
• Collaborate with internal teams and external stakeholders to ensure alignment and deliver comprehensive solutions.
• Act as a mentor for junior team members, sharing expertise in incident response and digital forensics best practices.

Skills

Incident response

Digital forensics

Client management

Leadership

Education

Bachelor’s degree in Information Security / CS / Digital Forensics

Master’s degree in Information Security / CS

PhD in related field

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

Job description

Palo Alto Networks is seeking a client-facing Principal Consultant in the UK to lead and deliver reactive incident response engagements for diverse customers. You will manage engagements from scoping through containment and remediation, guiding clients to strengthen their security posture.

You will work with cross-functional teams, apply forensic tools to identify IOCs and attack vectors, and mentor junior staff. Travel up to 20% is required, with impact across geographies.