Palo Alto Networks
Senior Consultant, DFIR, Reactive Services (Unit 42) - Remote
US · Burbank · Burbank, United States of America · Remote · Freelance · Senior
No specific timezone requirement mentioned
Salary not stated
AI summary
About the company
Palo Alto Networks是一家网络安全公司，使命是保护数字生活，将AI融入业务，重视创新与影响力，打造多元化团队。
Role overview
该岗位属于Palo Alto Networks旗下Unit 42的反应服务团队，为远程工作，需调查企业网络安全事件，开展取证分析、识别攻击者活动，向客户提供可操作的调查结果，协助客户完成安全 breach 的调查、遏制与恢复，需与团队协作交付高质量客户成果。
Responsibilities
- 执行勒索软件等网络安全事件的数字取证与响应调查
- 负责分配的调查工作流，向上级汇报发现与障碍
- 分析多维度证据，构建事件时间线与攻击范围
- 开展系统、内存、日志等的取证采集与分析
- 提供证据化建议，支持事件遏制、修复与恢复
- 撰写调查文档、技术报告及客户更新内容
- 遵循证据处理与保管链流程
- 参与调查手册、工具的开发与知识共享
Requirements
- 具备企业级DFIR实操经验
- 精通取证工具、证据采集与日志分析
- 有Windows调查经验，熟悉Linux、macOS或云环境
- 具备良好技术判断力与客户沟通能力
- 相关学位或同等实践经验
Nice to have
- 具备咨询或事件响应服务背景
- 掌握恶意软件排查、脚本编写与MITRE ATT&CK知识
- 拥有GCFA、GCFE等相关认证
- 可接受最多20%的差旅
Pay & benefits
- 年薪范围132800-182600美元，含限制性股票与奖金
- 提供员工福利计划
- 为残障员工提供合理便利支持
Notes for China-based candidates
- 岗位不提供工作签证赞助，需自行解决境外工作许可
- 远程工作需适配美国时区要求
- 薪资以美元结算，按资质与经验确定
Register to apply directly, open the original posting and save jobs
Sign up freeThis is not an official page of Palo Alto Networks. The listing is gathered automatically from the employer's official careers page or a job board's public feed (see sources on the right). Fintegrity has no agency relationship with this employer and has not verified its credentials. Chinese titles and summaries are AI-generated; the original text prevails. Apply on the source page. We never charge job seekers. Ranking & display rules
Excerpt
Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re…
Sign up freeThe summary and highlights are AI-generated and may contain errors; the original posting prevails.
Sources or employers who want a posting removed or corrected can email contact@fintegrity.cn; we act within 24 hours.