Remote Senior DFIR Incident Response Consultant

Forensic Focus; Burbank (CA); Remote; USD 120,000 - 180,000; Full time

Job summary

Palo Alto Networks is seeking a Senior Consultant in DFIR (Unit 42) to lead investigations of ransomware, intrusions, and other security incidents. You will analyze endpoint, network, identity and cloud evidence to build timelines and determine attacker activity.

In this role, you will own investigative workstreams, support containment and recovery, and produce technical reports for clients in a fast-paced consulting environment.

Qualifications

• Hands-on enterprise DFIR experience and forensic acquisition.
• Strong log analysis and Windows investigation expertise.
• Familiarity with Linux, macOS or cloud environments.

Responsibilities

• Investigate ransomware, unauthorized access and security incidents.
• Own investigative workstreams and support containment and recovery.
• Produce technical reports for clients.

Skills

DFIR

Windows forensics

Log analysis

Forensic acquisition

Linux/macOS/cloud

Scripting

MITRE ATT&CK

GCFA/GCFE/GCIH

Job description

Palo Alto Networks is seeking a Senior Consultant in DFIR (Unit 42) to lead investigations of ransomware, intrusions, and other security incidents. You will analyze endpoint, network, identity and cloud evidence to build timelines and determine attacker activity.

In this role, you will own investigative workstreams, support containment and recovery, and produce technical reports for clients in a fast-paced consulting environment.