Senior Consultant, DFIR, Reactive Services

Job not on LinkedIn

🔥 0 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $132.8k - $182.6k / year

⏰ Full Time

🟠 Senior

💻 Frontend Engineer / Web Developer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Palo Alto Networks

WebsiteLinkedInAll Job Openings

10,000+ employees

🔒 Cybersecurity

🏢 Enterprise

💰 $1M Seed Round - Morta Security on 2013-02

Cybersecurity • Enterprise

Palo Alto Networks is a global cybersecurity company that provides AI-driven platforms, products, and services to protect networks, cloud workloads, endpoints, and applications. Its portfolio includes next-generation firewalls, SASE and Prisma Cloud (CNAPP) offerings, the Cortex security operations suite (XDR, XSOAR, XSIAM), and Unit 42 threat intelligence and incident response services. Palo Alto Networks helps enterprises secure AI deployments, automate SOC workflows, and prevent, detect, and respond to sophisticated threats across hybrid and multi-cloud environments.

📋 Description

• Execute digital forensics and incident response investigations involving ransomware, unauthorized access, and other cybersecurity incidents • Own assigned investigative workstreams and escalate findings and blockers to the engagement lead • Analyze endpoint, host, network, identity, and cloud evidence to establish incident timelines, attacker behavior, and scope of compromise • Perform forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry • Support incident containment, remediation, and recovery through evidence-based recommendations • Document investigative activities and prepare technical reports and client updates • Follow evidence handling and chain-of-custody procedures • Collaborate with engagement teams to deliver timely, high-quality client outcomes • Contribute to investigation playbooks, tools, and knowledge sharing • Maintain knowledge of emerging threats, attacker techniques, and forensic methodologies • Communicate findings directly to clients while working alongside Principal Consultants and Consulting Directors

🎯 Requirements

• Hands-on enterprise DFIR experience • Proficiency with forensic tools, evidence acquisition, and log analysis • Experience investigating Windows • Familiarity with Linux, macOS, or cloud environments • Strong technical judgment and client communication • Relevant degree or equivalent practical experience • Consulting or incident response services background preferred • Malware triage, scripting, and MITRE ATT&CK knowledge preferred • GCFA, GCFE, GCIH, or similar certifications preferred • Willingness to travel up to 20% preferred • Must not require immigration sponsorship; the employer will not sponsor work visas for this position

🏖️ Benefits

• Restricted stock units • Bonus • Employee benefits are referenced but not itemized • Reasonable accommodations for qualified individuals with a disability or special need