דרושים Consulting Director Dfir Reactive Services Unit - ב-Palo Alto ב-ארהב

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

As a Senior Technical Support Engineer, you will engage directly with our valued customers to address intricate post-sales concerns. Your role involves in-depth evaluation of multifaceted scenarios, employing critical thinking to understand methods, techniques, and evaluation criteria for obtaining results. Networking with key contacts beyond your domain of expertise will be routine, and your knack for explaining complex technical issues to both technical and non-technical professionals will be a strong asset.

Under Focused Services, you will be a designated customer advocate who will assist in providing tailored support, weekly reviews, root cause analysis for critical issues, release review and upgrade planning, and a quarterly business review. You will provide personalized support and become deeply familiar with your implementation and business priorities to proactively drive best practices and help you continuously improve your security posture.

You will actively contribute to technical discussions within cross-functional teams, fostering transparency that drives product improvement, enriches work environments, and enhances cybersecurity. Your prompt support for our clients ensures swift resolution to keep their environments secure. This requires you to move swiftly and thoughtfully, providing technical assistance even in high-pressure situations.

Your Impact

• Offer technical support to customers and partners
• Effectively manage support cases from recording to resolution, including timely follow-ups
• Conduct fault isolation and root cause analysis for technical issues
• Author Technical Support Bulletins and other technical documentation in the Knowledge Base
• Review technical content for training, marketing, manuals, and troubleshooting guides
• Travel to customer sites for critical situations, expediting resolutions as needed
• Provide configurations, troubleshooting, and best practices to customers
• Collaborate with the Engineering team to influence product operability
• Participate in weekend on-call rotation and provide after-hours support as required
• Communicate complex technical issues effectively to internal and external stakeholders
• Provide support that includes mandatory weekend, holiday shift work and on-call support. Support includes a blend of as-needed and rotational coverage, which is subject to change.

Your Experience

• Previous experience in at least one customer-facing technical support position as Senior Support Engineer or as Escalations Engineer
• Proficiency with Windows OS, Linux OS, iOS, Android OS, and macOS applications (Installation, troubleshooting, debugging), along with deployment tools (SCCM, GPO, AD, JAMF)
• Analytical troubleshooting skills in Linux, displaying problem-solving abilities
• Strong proficiency in software and infrastructure troubleshooting, testing, and debugging
• Independent troubleshooting ability in diverse, complex environments with mixed applications and protocols
• Familiarity with Internet-based technologies including DNS, Security, IP Routing, SSH, FTP, HTTP/HTTPS, Email Routing
• Familiarity with SOAR platforms - writing new and expanding new playbooks using automation and scripting tools.
• Knowledge of IP network technologies and performance monitoring/troubleshooting software tools (Datadog, Cloud Watch - advantageous)
• Intermediate knowledge of SIEM tools for parsing, correlation, data modeling, and dashboards
• Exposure to SIEM, vulnerability management tools, and firewalls
• Experience working in a collaborative, 24x7 uptime environment with on-call responsibilities
• Comfortable collaborating across diverse cross-functional teams with open communication
• Previous experience in a customer-facing technical support role (Support Engineer) - advantageous
• Fundamental understanding of Kubernetes, GCP, and AWS for troubleshooting cloud agent deployment and data extraction
• Basic scripting knowledge (JS/Python/PowerShell, SQL/XDL/SPL) to troubleshoot playbooks and extract data from various datasets (advantageous)
• A bachelor's degree in computer science or related discipline or equivalent military experience required (advantageous)

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $108,000/YR - $162,000YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Serve as a key contributor to the development, maturation, and innovation of Unit 42’s cloud security consulting services.

• Lead and deliver complex cloud security assessments covering architecture, configuration, identity, monitoring, and threat detection across AWS, Azure, GCP, and hybrid/multi-cloud environments.

• Evaluate cloud network architectures, including perimeter protections, VPC/VNet segmentation, API gateways, ingress/egress controls, and cloud-native security services.

• Analyze cloud logging, telemetry, and monitoring coverage; identify gaps in detection and alerting; and provide actionable recommendations to improve visibility, SIEM/XDR integration, and threat-hunting effectiveness.

• Assess cloud identity and access management (IAM) design, including federation, least privilege models, role delegation, conditional access, privilege escalation paths, and MFA enforcement across cloud providers.

• Utilize cloud-native CLIs, SDKs, and APIs to perform deep technical validation of configurations, controls, and security posture.

• Assess multi-cloud and hybrid-cloud deployments by reviewing interoperability, dependencies, and security impacts between cloud services and on-prem infrastructure.

• Develop strategic cloud security roadmaps that align technical recommendations with a client’s broader business objectives, resource constraints, and long-term security transformation initiatives.

• Integrate Palo Alto Networks cloud platforms (Prisma Cloud, Prisma SASE, Cortex XSIAM, and Precision AI) into consulting engagements to drive differentiated value and help customers enhance their security posture.

• Engage with prospective clients in a pre-sales capacity to uncover cloud security pain points, evaluate architectural weaknesses, and position Unit 42 solutions to key outcomes.

• Support delivery teams in overcoming technical objections and effectively tying cloud security recommendations to business risk, operational impact, and customer strategic goals.

• Build and maintain long-term executive relationships, serving as a trusted strategic advisor for cloud security and Zero Trust transformation initiatives.

• Lead the development and delivery of cloud security enablement content to elevate consulting capabilities across Unit 42.

• Partner with Palo Alto Networks product development teams to provide structured feedback on features, customer patterns, and cloud security trends that influence the roadmap and delivery experience.

Your Experience

• 4+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards

• 6+ years of professional services and consulting experience and 3+ years of Director (or and equivalent Senior Manager) experience leading consulting delivery teams is highly preferred

• Experience managing a diverse team of business and technical consultants

• Cloud Security-related certifications preferred

• Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc).

• Deep experience within the cloud native application protection platform (CNAPP) technology or advisory/consulting space.

• Strong fluency in the application of Virtual Machines, SaaS, IaaS, PaaS, FaaS and other public cloud technical infrastructure concepts.

• Possess a deep technical knowledge in Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)

• Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)

• Knowledge of the technical nuances related to SD-WAN and SASE solutions and their application to Cloud Environment access solutions.

• 10+ years in developing, strengthening and expanding client relationships

• Knowledge of how to integrate command-line interfaces or scripting tools as a part of a risk assessment or remediation in cloud environments is a plus.

• Rich understanding of how Enterprise’s use and struggle using infrastructure as code and continuous integration tools such as Ansible, Chef, Jenkins, Kubernetes, Packer, Pulumi, Puppet, Saltstack and Terraform or CSP tools such as CloudFormation, Resource Manager or Deployment Manager.

• Ability to scope new opportunities with prospective clients, including drafting statements of work and proposals

• Ability to perform travel requirements as needed to meet business demands (on average 25%)

• Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience to meet job requirements and expectations

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $183000/YR - $252000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

1. Strategic Partner to the CPO

• Partner with the CPO to develop, evolve, and operationalize the multi-year People Strategy, ensuring alignment with enterprise priorities and transformation objectives.

• Act as a connector and integrator across all People sub-functions, including Talent, Total Rewards, DEI, Learning, HR Tech, and Places, bringing cohesion and clarity to the collective strategy.

• Support the PLT in setting and prioritizing strategic initiatives that enable scale, impact, and transformation.

2. Strategic Planning & KPI Governance

• Lead the People Team’s strategic planning and goal-setting process, ensuring tight alignment with company-level OKRs.

• Develop and maintain a People Strategy Dashboard that tracks performance against key enterprise and People metrics, including leadership confidence, engagement, performance differentiation, and efficiency.

• Drive accountability by ensuring the PLT measures what matters, reports outcomes consistently, and uses data to guide decision-making.

3. Transformation Design & Strategic Governance

• Structure and frame People-related transformation initiatives

• Provide strategic scaffolding and governance models for initiatives led across the People function, ensuring alignment, sequencing, and clarity of ownership.

• Serve as the strategic interface between the People Team and Corp Strategy and or other Transformation Offices to ensure synchronization of priorities.

4. Executive and Board Communications

• Lead the creation of executive and Board-facing communications that articulate the People Strategy and progress against key priorities.

• Develop clear, data-driven narratives and materials for Board updates, executive off-sites, and quarterly business reviews, reflecting the strategic maturity of the People function.

• Translate analytics and insights into concise, compelling stories that demonstrate organizational impact, transformation outcomes, and future priorities.

5. Research, Benchmarking & Strategic Insight

• Conduct market and best-practice research across high-growth and technology peers to inform the evolution of Palo Alto Networks’ People Strategy.

• Act as the internal strategist who anticipates talent and organizational needs based on external trends and internal data.

Your Experience

• 8–12 years of experience in People Strategy, Corporate Strategy, or Management Consulting, ideally within a high-growth or technology environment.

• Demonstrated success in strategy development, organizational design, and enterprise planning at scale.

• Strong analytical and conceptual skills; able to integrate data, insight, and storytelling into actionable strategies.

• Exceptional communication and presentation capability, with experience preparing materials for senior executives and Boards of Directors.

• Proven ability to influence and align cross-functional senior stakeholders without direct authority.

• High learning agility, intellectual curiosity, and comfort operating in fast-moving, high-ambiguity environments.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $218,600 - $299,925/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• You will serve as the Professional Services leader for your team, ensuring service delivery exceeds customer expectations and drives high levels of customer engagement.

• Own the comprehensive financial and operational management of the business, which includes executing all activities tied to defined goals such as accelerating backlog retirement and ensuring accurate revenue.

• Your leadership will drive operational excellence and ensure consistent operational discipline and accurate reporting, including ownership of key business metrics such as utilization and customer satisfaction .

• Ensure your team is appropriately staffed and has the necessary capacity to achieve quarterly goals, effectively managing a diverse mix of delivery resources (e.g., regional and global delivery teams) to achieve optimal efficiency.

• Champion the integration of AI/ML tools to optimize internal Professional Services operations, drive efficiency in service delivery, and develop innovative execution strategies to increase team productivity.

• A significant portion of your impact is external: collaborating with the sales leadership team, product, portfolio and support teams where you will act as the Professional Services liaison to enable client success. You will build strong customer relationships and be the point of contact for successfully handling customer escalations to maintain high customer satisfaction.

• Focus on the efficient delivery of standardized professional service offerings, focusing on accelerating the customer's time-to-value (TTV) and enforcing high-quality, standardized service delivery methodologies across all engagements.

Your Experience

• 7+ years leading and scaling Professional Services or Customer Success teams responsible for the successful deployment and ongoing operation of complex enterprise security architectures.

• 5+ years of experience in a management role overseeing technical consultants, architects, Customer Success Engineers or Resident Engineers/Extended Expertise staff , with teams of 10+ technical resources.

• Proven expertise in managing the full Professional Services or Customer Success project lifecycle from pre-sales through to successful project closeout and revenue recognition .

• Strong foundational understanding of Internet security concepts and products , with a deep demonstrated knowledge of NGFW and SASE (Secure Access Service Edge) architecture and its components.

• Demonstrated experience running a profitable Professional Services or Customer Success business , including achieving revenue/margin targets, managing backlog, health and optimizing project closure rates.

• Skilled in key business systems, including:

  • Experience with Professional Services Automation tools (e.g., Clarizen, Certina, Kantata) for tracking metrics like utilization, time-off, and backlog.

  • Experience with Sales Management tools (e.g., Salesforce) for revenue forecasting and pipeline review.

  • Experience with Business Intelligence tools (e.g., Tableau) for reporting on key operational metrics.

• Demonstrated ability to manage critical customer escalations effectively and ensure prompt resolution for high-profile clients .

• Excellent written and verbal communication skills with the ability to clearly articulate complex technical knowledge to non-technical individuals and leadership .

• Bachelor’s Degree or equivalent military experience.

• Ability to travel up to 25% domestically to customer sites and internal business meetings.

• US Government DoD Active Top Secret Clearance or higher.

As threats and technology evolve, we stay in step to accomplish our mission. You’ll be involved in implementing new products, transitioning from old products to new, and fixing integrations and critical issues as they are raised. But you won’t wait for them to be raised, you’ll seek them out, too. We fix and identify technical problems with a pointed focus of providing the best customer support in the industry.

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $178000 - $245500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

This role is client-facing and requires the Principal Consultant to lead and produce deliverables based on reactive services client engagements. The Principal Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to manage incident response engagements and provide guidance on longer term remediation.

Your Impact

• Perform reactive incident response functions including but not limited to: host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs)
• Examine firewall, web, database, and other log sources to identify evidence of malicious activity
• Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and other investigation tools to determine source of compromises and malicious activity that occurred in client environments
• Manage incident response engagements to scope work, guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations
• Ability to perform travel requirements as needed to meet business demands (on average 20%)
• Mentorship of team members in incident response and forensics best practices

Your Experience

• 6+ years of incident response or digital forensics consulting experience with a passion for cyber security
• Strong leadership skills including experience managing a team or individuals
• Experience with leading complicated engagements including scoping, interfacing with the client, and have executed on a technical front
• Proficient with host-based forensics and data breach response
• Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools

• Identified ability to grow into a valuable contributor to the practice and, specifically:

  • have an external presence via public speaking, conferences, and/or publications;

  • have credibility, executive presence, and gravitas;

  • be able to have a meaningful and rapid delivery contribution;

  • have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products;

  • be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team.

• Incident response consulting experience required
• Ability to perform travel requirements as needed to meet business demands (on average 20%).
• Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $151000/YR - $208000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

You will create statistics-based classification algorithms detecting everything from new malware through process behavior and attackers operating in enterprise-scale networks using data from multiple Windows endpoints; from analyzing attack patterns, finding statistical anomalies, and validating that you detect real attacks and APTs on real customer data.

Your Impact

• Research new methods to detect various attack techniques by utilizing enormous amounts and varied types of data
• Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities
• Take an active role in our collection modules by improving the ones that are already available and investigating new collection modules that will improve the quality of our detections
• Simulate attacks in the lab and conduct a deep analysis of the behavior
• Be part of a diverse research group, improving our research processes and leading us to be a better team, creating a better product
• Stay up to date with APTs, attacker methodologies, and TTPs

Your Experience

• In-depth knowledge of the inner-workings of operating systems (Especially Windows)
• Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise
• Vast experience and interest in malware research or development
• Python software development experience
• Comfortable conducting research and gathering insights by querying large databases
• Ability to drive and own projects
• Independent and team player, critical thinker

Advantages:

• Experience in machine learning or data analysis
• Reverse engineering knowledge and experience
• Advanced knowledge of Microsoft AD infrastructure
• Exploitation knowledge and experience

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

Threat Detection Engineer (Threat Data Platform)

Your Impact

• This role bridges security research and fundamental software implementation

• You will be responsible as subject matter experts to interpret threat intelligence from both automated systems and machine learning.

• You will also be creating the software modules that generate indicator lists, measure indicator quality, and gauge the quality of intelligence ingested.

• The Threat Data Platform is the keystone for intelligence production and dissemination; you are its steward

Your Experience

• Demonstrable expertise in an operational security role - soc analysis, reverse engineering, threat intelligence monitoring and/or creation

• Experience interpreting logs from commercial security products

• Deep understanding of sandbox technologies; how they work and interpreting their reports

• Passion for using automation to enable workflows and automate your day to day tasks

• Expert experience in python is a must

• Strong understanding of fundamental software design for data access and processing larger datasets (REST/SQL/BQ/Mongo/etc…)

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $149,000 - $204,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found .

All your information will be kept confidential according to EEO guidelines.