Senior DFIR Lead: Incident Response & Forensics

Jobs Paloaltonetworks; Burbank (CA); Remote; USD 190,000 - 261,000; Full time

Benefits offered by this job

Travel up to 20%

Job summary

Palo Alto Networks is seeking a Senior DFIR Consultant to lead cybersecurity incident response and breach investigations for Unit 42 clients. This role blends strategic advisory with hands-on technical leadership across industries and environments.

You will guide complex engagements, stay ahead of threat trends, and manage multiple engagements while helping grow our client base through cross-sell opportunities. This remote role offers global collaboration with hybrid teams.

Qualifications

• 10+ years of DFIR consulting experience (breach response, investigations)
• Proven leadership of technical incident response teams in high-pressure environments
• Deep expertise in forensic methodologies (chain of custody, disk/memory analysis)
• Hands-on experience with tools: EnCase, FTK, SleuthKit, Volatility (or equivalent)
• Strong operating system expertise (Windows, Linux, or macOS)
• Degree: Bachelor’s + 12 yrs, Master’s + 8 yrs, or PhD + 5 yrs (or equivalent experience)

Responsibilities

• Lead breach response engagements, providing both strategic direction and hands‑on DFIR leadership
• Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
• Guide clients through complex incidents with tailored, high-impact solutions
• Stay current on threat landscape, vulnerabilities, and attacker techniques (TTPs, persistence methods)
• Perform and oversee forensic investigations (memory/disk acquisition, analysis) using tools like EnCase, FTK, SleuthKit, Volatility
• Manage client relationships, lead technical discussions, and run multiple engagements concurrently
• Support business growth through client expansion (cross-sell/upsell) and new opportunity identification

Skills

DFIR consulting

Incident response leadership

Client management

Budget ownership

Threat awareness

Education

Bachelor’s degree with 12+ years experience

Tools

EnCase

FTK

SleuthKit

Volatility

Job description

Palo Alto Networks is seeking a Senior DFIR Consultant to lead cybersecurity incident response and breach investigations for Unit 42 clients. This role blends strategic advisory with hands-on technical leadership across industries and environments.

You will guide complex engagements, stay ahead of threat trends, and manage multiple engagements while helping grow our client base through cross-sell opportunities. This remote role offers global collaboration with hybrid teams.