Senior Consulting Director – Offensive Security, Proactive Services (Unit 42)

Palo Alto Networks, Inc.

Our Mission

At Palo Alto Networks everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Our Approach to Work

We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible – from your wellbeing support to your growth and development, and beyond!

At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work from the office three days per week, leaving two days for choice and flexibility to work where you feel most effective. This setup fosters casual conversations, problem-solving, and trusted relationships. While details may evolve, our goal is to create an environment where innovation thrives, with office-based teams coming together three days a week to collaborate and thrive, together!

Your Career

The Senior Consulting Director, Offensive Security will lead the EMEA Offensive security/Red Team focused on assessing and challenging the security posture of Unit 42’s clients across a wide array of industries, geographies, and organizational structures. They will be the client’s advocate for cybersecurity risk management and will provide strategic and technical leadership in this area. This role will be a mix between hands off and hands on work. As we are growing the region we ask for a hybrid can-do mentality with strong technical acumen.

Your Impact

• Assist in the development of internal infrastructure design for research, development, and testing focused on offensive security
• Conducts periodic scans of networks to find and detect vulnerabilities
• Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools
• Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
• Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients
• Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements
• Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)
• Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable)
• Assist Unit42 Leadership in the development of security standards and best practices for the organization and recommend security enhancements as needed
• Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools
• Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weaknesses after receiving permission from client stakeholders
• Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach
• Manage and grow the Offensive Unit42 EMEA team
• Ability to manage remote team members
• Ability to perform travel requirements as needed to meet business demands (on average 30%)

Your Experience

• Demonstrated prior consulting experience and success with large, multinational organisations in designing and implementing an organisation’s cybersecurity program, organisational structures, and capabilities
• Experience as a senior-level team leader having established a security vision, strategy, and program, while anticipating future security and compliance challenges up to and including overseeing other seniors, mid-level analyst/consultant teams
• Ability to travel as needed to meet business demands
• Strong communication and presentation skills with verifiable industry experience
• Expert level of knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance
• Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, penetration testing/Red Teaming, vulnerability assessments, among others
• Client first mindset and strong client management skills -Experienced-based understanding of clients’ needs and desired outcomes in cybersecurity and risk management engagements
• Public speaking experience, demonstrated writing ability, including technical reports, business communication, and thought leadership pieces
• Operates with a hands-on approach to service delivery with a bias towards collaboration and teamwork
• Must be results-driven and strategic, yet have the ability to thrive in a face-paced startup environment
• Cybersecurity industry certifications such as CISSP and/or CISM
• Bachelor’s Degree -an advanced degree such as MSc, MBA, is a plus or equivalent military experience required
• 12+ years ofrelevant professional experience in the cyber security industry
• Track record of thinking out of the box and devising innovative solutions that add value / resolve client challenges
• Identified ability to provide a valuable contribution to the development and growth of the practice as a whole and, specifically –
  • have an external presence via public speaking, conferences, and/or publications
  • have credibility, executive presence, and gravitas
  • be able to have a meaningful and rapid delivery contribution
  • have the potential and capacity to understand all aspects of the business and gain an excellent understanding of PANW products
  • be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team
• Last but not least a strong track record on scaling Red teams

The Team

Unit 42 Consulting is Palo Alto Network’s security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients’ security posture.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at .

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.

Is role eligible for Immigration Sponsorship?: Yes