Referso Jobs

Consulting Director, DFIR, Reactive Services

Palo Alto Networks · Posted Feb 10, 2026

Open

Remote, Brazil
Remote
Senior
10+ years

Consulting Director, DFIR, Reactive Services

Palo Alto Networks · Posted Feb 10, 2026

Open

Remote, Brazil
Remote
Senior
10+ years

Consultant, DFIR, Reactive Services (Unit 42) – LATAM

Palo Alto Networks · Posted Jun 29, 2026

Open

Remote
Remote
3–5 years

Apply with RefersoAI Apply on careers page

The Consultant, Reactive Services is an individual contributor role within Unit 42, responsible for supporting digital forensics and incident response (DFIR) engagements across a wide range of client environments throughout Latin America.

Responsibilities

Support and execute digital forensics and incident response investigations across enterprise environments.
Conduct forensic analysis of endpoints, systems, logs, and cloud environments to identify attacker activity and scope of compromise.
Assist with host, network, and cloud investigations during active security incidents.
Perform forensic acquisition and preservation of evidence following industry best practices and chain-of-custody procedures.
Utilize industry-standard DFIR tools and methodologies to investigate malicious activity and support containment efforts.

Requirements

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
Nice to have: MITRE ATT&CK
Nice to have: Malware Analysis
Nice to have: Threat Hunting
Nice to have: Endpoint Investigations

Skills

Digital Forensics Incident Response Forensic Analysis

Consulting Director, DFIR, Reactive Services (Unit 42)

Palo Alto Networks · Posted Sep 18, 2026

Open

Remote, Canada
Remote
Full-time · Senior
$182K–$251K per year
10+ years

Apply with RefersoAI Apply on careers page

Senior-level consulting position providing expert-level guidance on all areas of cybersecurity and data breach response to Unit 42 clients.

Compensation

$182,240.00 - $250,580.00/yr

Responsibilities

Lead technical breach response teams in fast-paced environments, providing strategic direction and hands‑on guidance.
Deliver expert-level consulting on cybersecurity, incident response, and digital forensics to a diverse client base.
Proactively collaborate with clients and internal teams to develop unique and creative solutions for complex security incidents.
Maintain and apply hyper-current knowledge of the threat landscape, emerging vulnerabilities, and malware persistence mechanisms.
Utilize advanced forensic tools and processes (e.g., EnCase, FTK, Volatility) for evidence acquisition and analysis across major operating systems.

Requirements

Bachelor's degree
Master's degree
PhD
Nice to have: leadership
Nice to have: client rapport

Skills

digital forensics incident response DFIR

Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote

Palo Alto Networks · Posted Oct 1, 2026

Open

Remote, United States
Remote
Full-time · Senior
$158K–$217K per year
6–8 years

Apply with RefersoAI Apply on careers page

Senior individual contributor role within Unit 42 responsible for delivering expert-level incident response and digital forensics services to clients across a wide range of industries and environments.

Compensation

$157,600.00 - $216,700.00/yr

Responsibilities

Lead and execute digital forensics and incident response investigations across enterprise environments.
Serve as a technical lead on incident response engagements, guiding investigative strategy and forensic analysis.
Conduct advanced host, network, and cloud investigations to identify root cause, attacker behavior, and scope of compromise.
Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.
Utilize industry-standard DFIR tooling and methodologies to analyze malicious activity and support incident containment.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Nice to have: large-scale enterprise security incidents
Nice to have: cloud
Nice to have: hybrid environments
Nice to have: background in consulting

Skills

digital forensics incident response

Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote Weekend Shift

Palo Alto Networks · Posted Oct 1, 2026

Open

Remote
Remote
Full-time · Senior
$158K–$217K per year
6–8 years

Apply with RefersoAI Apply on careers page

The Principal Consultant, Reactive Services is a senior individual contributor role within Unit 42 responsible for delivering expert-level incident response and digital forensics services to clients across a wide range of industries and environments.

Compensation

$157,600.00 - $216,700.00/yr

Responsibilities

Lead digital forensics and incident response investigations across enterprise environments.
Serve as a technical lead on incident response engagements.
Conduct host, network, and cloud investigations to identify root cause, attacker activity, and scope of compromise.
Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.
Utilize industry-standard DFIR tools and methodologies to support incident containment and recovery.

Requirements

Bachelor's degree
Nice to have: large-scale enterprise security incidents
Nice to have: consulting
Nice to have: MDR
Nice to have: SOC

Skills

DFIR incident response forensic acquisition evidence handling

Consulting Director, DFIR, Reactive Services (Unit 42)

Palo Alto Networks · Posted Oct 1, 2026

Open

Remote, United States
Remote
Full-time · Manager
$190K–$261K per year
10+ years

Apply with RefersoAI Apply on careers page

Senior-level consulting role leading cybersecurity incident response and breach investigations for Unit 42 clients.

Compensation

$189,600.00 - $260,700.00/yr

Responsibilities

Lead breach response engagements, providing both strategic direction and hands-on DFIR leadership
Deliver expert consulting across incident response, digital forensics, and cyber risk scenarios
Guide clients through complex incidents with tailored, high-impact solutions
Stay current on threat landscape, vulnerabilities, and attacker techniques (TTPs, persistence methods)
Perform and oversee forensic investigations (memory/disk acquisition, analysis) using tools like EnCase, FTK, Volatility

Requirements

Bachelor’s
Master’s
PhD
Nice to have: speaking
Nice to have: media

Skills

EnCase FTK SleuthKit Volatility Windows Linux

SleuthKit jobs

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills