Remote Principal Cybersecurity Incident Lead

Palo Alto Networks, Inc.; United States; Remote; USD 151,000 - 208,000; Full time

Benefits offered by this job

Remote work

Job summary

Palo Alto Networks, Inc. is seeking a Principal Consultant in Unit 42 to lead technical engagements helping clients recover from security incidents and build effective security operations programs.

You will partner with Incident Response, Threat Intelligence, and other teams to minimize risk and improve long-term security posture. This senior role requires deep incident response expertise and the ability to drive strategic remediation with clients worldwide.

Qualifications

• Bachelor’s degree with 15 years of relevant experience, Master’s with 12 years, or PhD with 8 years.
• 6+ years of management experience leading technical teams in networking, systems, or virtualization at enterprise scale.
• Deep expertise in identity management, SSO, and modern authentication protocols.
• Strong expertise with cloud concepts and securing hybrid-cloud infrastructure.

Responsibilities

• Lead and manage complex Incident Response remediation engagements for global clients, with potential for up to 30% travel.
• Collaborate with Incident Response Leads to address risks identified during investigations.
• Develop remediation workflows, strategic recommendations, and roadmaps aligned with cybersecurity frameworks.
• Architect and execute rebuilding servers/workstations using IaC tools (Terraform, Ansible, Packer).
• Design secure network topologies and infrastructure hardening based on attacker techniques.
• Create and deliver reports for technical and executive leadership.
• Communicate remediation strategies to clients and IT staff.

Skills

Incident Response

Threat Intelligence

Project Management

Security Architecture

Education

Bachelor’s degree + 15 years

Master’s degree + 12 years

PhD + 8 years

Tools

Terraform

Ansible

Packer

Jenkins

Job description

Palo Alto Networks, Inc. is seeking a Principal Consultant in Unit 42 to lead technical engagements helping clients recover from security incidents and build effective security operations programs.

You will partner with Incident Response, Threat Intelligence, and other teams to minimize risk and improve long-term security posture. This senior role requires deep incident response expertise and the ability to drive strategic remediation with clients worldwide.