Principal Consultant, DFIR, Reactive Services (Unit 42)
Palo Alto Networks
Toronto, Ontario
The Role
This position involves leading and managing incident response engagements on a reactive basis, conducting host-based forensic analysis across Windows, Linux, and macOS environments, examining diverse log sources to uncover malicious activity, investigating data breaches, and advising clients on remediation strategies to strengthen their security posture.
Skills & Experience
Candidates should bring hands-on experience with forensic tools including EnCase, FTK, X-Ways, SIFT, and Splunk, alongside proficiency in log analysis covering firewalls, web, and database sources. Experience identifying indicators of compromise and guiding clients through complex investigations is essential to this principal-level position.
Who It Suits
This role suits a seasoned digital forensics and incident response professional who is confident leading client-facing engagements, communicating technical findings clearly to varied audiences, and working collaboratively across distributed teams. Those who thrive in fast-paced, reactive environments and enjoy solving complex, real-world security incidents will find this role compelling.
Typical advertised salary for Incident Response roles in Canada: C$97,000–C$158,000 (median C$130,000 — from 40 recent listings analysed by Forensic Focus).
Learn More/Apply
