Principal Consultant, Cloud DFIR (Unit 42) – Remote

Palo Alto Networks

Harrisburg, PA

Remote · Lead/Principal · $151,000 - $208,000 a year

The Role

This senior individual contributor position focuses on leading cloud-focused incident response and digital forensics investigations across AWS, Azure, GCP, and hybrid enterprise environments. Day to day involves acting as technical lead on active security incidents, scoping breaches, containing threats, performing advanced cloud forensic analysis, and guiding clients through recovery and remediation.

Skills & Experience

Candidates require demonstrable expertise in digital forensics and incident response within cloud platforms including AWS, Azure, and GCP. Experience conducting high-severity investigations at a senior or principal level is essential. Familiarity with hybrid enterprise environments and the ability to translate technical findings into actionable remediation guidance are also expected.

Who It Suits

This role suits an experienced cloud DFIR practitioner who is comfortable operating autonomously as a technical lead, working directly with clients during high-pressure incidents. It is well suited to someone who thrives in a fully remote, collaborative environment and is motivated by solving complex, real-world cybersecurity challenges at scale.

Typical advertised salary for Digital Forensics roles in United States: $90,000–$154,000 (median $120,000 — from 170 recent listings analysed by Forensic Focus).

Learn More/Apply

Applications are handled entirely by the employer or the original listing site. Forensic Focus aggregates and summarises public listings; details can change after publication — always confirm on the employer's page.