Consultant, DFIR, Reactive Services

• Perform reactive incident response functions including host-based analysis on Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs)
• Examine firewall, web, database, and other log sources to identify evidence of malicious activity
• Investigate data breaches leveraging forensics tools to determine the source of compromises
• Serve an active role on unit 42 incident response engagements - guiding clients through digital forensics investigations, containment of security incidents, and providing tactical remediation recommendations
• Ability to perform light travel requirements as needed to meet business demands (on average 30%)

• 2+ years of incident response or digital forensics experience
• Proficient with host-based forensics and data breach response
• Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Volatility, WireShark, TCPDump, and open-source forensic tools
• Bachelor’s Degree in Information Security, Digital Forensics, Cyber Security, Computer Science, related field, or equivalent experience required

• Incident Response Consulting is highly preferred
• Ability to grow into a valuable contributor to practice
• Have an external presence via public speaking, conferences, and/or publications
• Have credibility, executive presence, and gravitas
• Be able to have a meaningful and rapid delivery contribution
• Have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products
• Be collaborative and build relationships internally, externally, and across all PANW functions, including the sales team

May include restricted stock units and a bonus