Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote Weekend Shift
Palo Alto Networks · Posted Oct 1, 2026
- Remote, United States
- Remote
- Full-time · Principal
- $158K–$217K per year
- 6+ years
A senior individual contributor role within Unit 42 responsible for delivering expert-level incident response and digital forensics services to clients. This role requires a dedicated weekend overnight schedule.
Compensation
$157,600.00 - $216,700.00/yr
Responsibilities
- Lead digital forensics and incident response investigations across enterprise environments.
- Serve as a technical lead on incident response engagements.
- Conduct host, network, and cloud investigations to identify root cause, attacker activity, and scope of compromise.
- Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.
- Utilize industry-standard DFIR tools and methodologies to support incident containment and recovery.
Requirements
- Bachelor's degree or equivalent practical experience
- Nice to have: Large-scale enterprise security incident response
- Nice to have: MITRE ATT&CK
- Nice to have: adversary tradecraft
- Nice to have: Malware triage