Remote Principal Incident Response Consultant

Palo Alto Networks; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Palo Alto Networks is seeking a client-facing Principal Consultant to lead and deliver reactive incident response engagements for a diverse set of customers. You will guide incident response from start to finish, offering expert containment and long-term remediation guidance. The role is remote, with travel up to 20% to meet client needs.

You will collaborate with internal teams and stakeholders, mentor junior staff, and help strengthen customers’ security postures through hands-on forensics.

Qualifications

• Bachelor’s degree with 8+ years or Master’s with 6 years or PhD with 3 years in Information Security or related field.
• Must speak English and Spanish; Portuguese is a plus.
• Direct experience in incident response or digital forensics consulting.
• Proficiency with host-based forensics and data breach response methodologies.
• Hands-on experience with forensic tools such as EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, or Wireshark.
• Ability to travel as needed up to 20%.

Responsibilities

• Manage and lead incident response engagements, including scoping work and guiding clients through investigations.
• Perform reactive incident response and host-based analysis on Windows, Linux, and Mac OS X to identify IOCs.
• Examine firewall, web, database, and log sources to identify evidence of malicious activity.
• Investigate data breaches using forensic tools to determine source and scope.
• Provide clients with actionable recommendations for long-term remediation and security posture improvement.
• Mentor junior team members and collaborate with internal and external stakeholders.

Skills

Incident response leadership

English and Spanish

Forensic analysis

Client communication

Team mentoring

Travel readiness

Education

Bachelor’s degree in Information Security or Computer Science

Master’s degree in Information Security or related field

PhD in information security or related field

Tools

EnCase

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

Job description

Palo Alto Networks is seeking a client-facing Principal Consultant to lead and deliver reactive incident response engagements for a diverse set of customers. You will guide incident response from start to finish, offering expert containment and long-term remediation guidance. The role is remote, with travel up to 20% to meet client needs.

You will collaborate with internal teams and stakeholders, mentor junior staff, and help strengthen customers’ security postures through hands-on forensics.