Consulting Director, Incident Recovery Operations; Unit Santa Clara, CA

Position: Consulting Director, Incident Recovery Operations (Unit 42) at Palo Alto Networks Santa Clara, CA
Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Who We Are

We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution.

From showing up for each other with integrity to creating an environment where we all feel included.

As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEX Benefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!

Job Description

Your Career

As a Unit 42 Recovery Specialist, you will play a critical role in assisting our customers with rebuilding, recovering, and restoring their computing and networking environments following security incidents. Working in conjunction with the Unit 42 service delivery team, you will lead and oversee Unit 42's external recovery partners as well as liaise with customer contacts, ranging from technical subject matter experts to executives and members of boards of directors.

You will demonstrate a professional presence and bearing while clearly articulating technical risks, recovery strategy, and recovery progress to these diverse stakeholders. Your expertise in networking and security products and solutions will be crucial as you guide customers through recovery processes, ensuring they adopt best practices to strengthen their security posture and prevent future incidents. This hands‑on role demands both technical acumen and exceptional communication skills as you address complex issues and deliver innovative solutions to establish a secure and resilient environment for our clients.

Your Impact

• Develop (in collaboration with the Incident Response lead) a unified and holistic approach to restoring technological infrastructure in the midst and/or aftermath of a cyber security incident

• Develop strategic processes to allow the client to cleanly and safely bring systems back into production

• Lead and oversee third‑party vendors to ensure that recovery and restoration activities are conducted in accordance with Unit 42 standards and in a cohesive manner

• As a trusted advisor, guide Unit 42 customers through implementing security standards and best practices in the context of restoring operations

• Proactively identify and communicate project status, risks and issues with the client contact(s) and the Unit 42 engagement lead(s)

• Provide after‑hours and weekend on‑call coverage as needed to support engagement activities.

• Partner with the relevant account teams to understand customers’ prior investments in PANW offerings and ensure that recommendations for expansion are presented in a methodical and sensible manner

• Travel as needed to customer locations in North America, often with minimal advance notice, up to 50% of the time.

• Other tasks and duties as needed to support the customer and/or business

Qualifications

Your Experience

• Prior implementation and/or troubleshooting of the following areas:
Active Directory, DNS, network configuration, enterprise software deployment, endpoint detection and associated performance degradation, SIEM and log management, cloud environments and other applicable security platforms.

• Minimum of ten years experience in…