Consulting Director, Incident Recovery Operations (Unit 42)

Your Career

As a Unit 42 Recovery Specialist, you will play a critical role in assisting our customers with rebuilding, recovering, and restoring their computing and networking environments following security incidents. Working in conjunction with the Unit 42 service delivery team, you will lead and oversee Unit 42's external recovery partners as well as liaise with customer contacts, ranging from technical subject matter experts to executives and members of boards of directors. You will demonstrate a professional presence and bearing while clearly articulating technical risks, recovery strategy, and recovery progress to these diverse stakeholders. Your expertise in networking and security products and solutions will be crucial as you guide customers through recovery processes, ensuring they adopt best practices to strengthen their security posture and prevent future incidents. This hands-on role demands both technical acumen and exceptional communication skills as you address complex issues and deliver innovative solutions to establish a secure and resilient environment for our clients.

Your Impact

• Develop (in collaboration with the Incident Response lead) a unified and holistic approach to restoring technological infrastructure in the midst and/or aftermath of a cyber security incident

• Develop strategic processes to allow the client to cleanly and safely bring systems back into production

• Lead and oversee third-party vendors to ensure that recovery and restoration activities are conducted in accordance with Unit 42 standards and in a cohesive manner

• As a trusted advisor, guide Unit 42 customers through implementing security standards and best practices in the context of restoring operations

• Proactively identify and communicate project status, risks and issues with the client contact(s) and the Unit 42 engagement lead(s)

• Provide after-hours and weekend on-call coverage as needed to support engagement activities.

• Partner with the relevant account teams to understand customers’ prior investments in PANW offerings and ensure that recommendations for expansion are presented in a methodical and sensible manner

• Travel as needed to customer locations in North America, often with minimal advance notice, up to 50% of the time.

• Other tasks and duties as needed to support the customer and/or business

Your Experience 

• Prior implementation and/or troubleshooting of the following areas: Active Directory, DNS, network configuration, enterprise software deployment, endpoint detection and associated performance degradation, SIEM and log management, cloud environments and other applicable security platforms.

• Minimum of ten years experience in information technology, systems administration, or network administration, with a minimum of three years experience managing security solutions in enterprise environments.

• Prior experience in consulting or other client-facing roles preferred

• Ability to remain calm, composed and articulate when dealing with high-pressure situations

• Excellent written and verbal communication skills, including the ability to distill and convey complex technical concepts, findings, and recommendations to client stakeholders who possess varying levels of subject-matter expertise

• Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience or equivalent military experience to meet job requirements and expectations

The Team

Unit 42 Consulting is Palo Alto Networks’ security advisory team.  Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients’ security posture.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $183000 - $252000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.