Remote Senior DFIR Consultant, Reactive Services

Palo Alto Networks, Inc.; Burbank (CA); Remote; USD 133,000 - 183,000; Full time

Job summary

Palo Alto Networks, Inc. in the United States is seeking a Senior Consultant for Unit 42 Reactive Services to conduct forensic investigations across enterprise environments.

You will lead hands-on DFIR workstreams and provide actionable findings to clients in fast-paced, client-facing engagements. The role offers a remote work option with global collaboration, and opportunities to contribute to playbooks, tools, and knowledge sharing, while maintaining rigorous evidence handling and reporting

Qualifications

• Hands-on enterprise DFIR experience.
• Proficiency with forensic tools, evidence acquisition, and log analysis.
• Experience investigating Windows; familiarity with Linux, macOS, or cloud environments.
• Strong technical judgment and client communication.
• Relevant degree or equivalent practical experience.

Responsibilities

• Execute digital forensics and incident response investigations across enterprise environments.
• Own assigned investigative workstreams and communicate findings to clients.
• Collaborate with engagement teams to deliver timely, high-quality client outcomes.
• Document investigative activities and prepare clear technical reports and client updates.
• Follow established evidence handling and chain-of-custody procedures.

Skills

DFIR

Forensic tools

Client communication

Education

Relevant degree or equivalent practical experience

Tools

Forensic tools

Evidence acquisition

Log analysis

Job description

Palo Alto Networks, Inc. in the United States is seeking a Senior Consultant for Unit 42 Reactive Services to conduct forensic investigations across enterprise environments.

You will lead hands-on DFIR workstreams and provide actionable findings to clients in fast-paced, client-facing engagements. The role offers a remote work option with global collaboration, and opportunities to contribute to playbooks, tools, and knowledge sharing, while maintaining rigorous evidence handling and reporting