Senior Consultant, Offensive Security, Proactive Security (Unit 42)

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

The Team Unit 42 - Unit 42 is the global threat intelligence and security consulting team at Palo Alto Networks and is dedicated to providing customers with the knowledge, expertise, and resources to protect their organizations from the ever-evolving threat landscape. Our team of world-class security researchers, consultants, and incident responders is at the forefront of cyber security, delivering actionable insights and tailored solutions to the world's most complex security challenges.

The Senior Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity best practices, providing strong recommendations and ensuring alignment with their security goals, demonstrating accountability for the outcomes.

Conduct comprehensive penetration tests (network, web application, cloud, mobile) to identify and exploit vulnerabilities, providing practical solutions to mitigate risks. Develop and maintain custom scripts, tools, and methodologies to automate and streamline offensive security engagements, focusing on simplifying complex processes. Create and deliver detailed engagement reports that clearly communicate testing methodologies, findings, and actionable remediation recommendations for both technical and executive audiences. Proactively collaborate with clients to scope engagements, clearly articulating various penetration testing approaches and ensuring alignment on objectives and deliverables. Perform threat hunting and compromise assessments to identify active or dormant indicators of compromise (IoCs) using advanced security tooling. Conduct cyber risk assessments using industry frameworks such as NIST CSF, ISO 27001, and CIS Top 20 to provide clients with a clear view of their security posture. Challenge security standards curiously and positively by providing clients with specific, forward-looking recommendations to protect sensitive data and enhance their incident response capabilities.

Required Qualifications Bachelor’s Degree in Information Security, Computer Science, Cyber Security, or equivalent professional experience. 4+ years of professional experience in information security, with a focus on penetration testing, vulnerability assessments, or red teaming. Hands-on experience with security assessment tools such as Metasploit, Burp Suite Pro, Nessus, or Cobalt Strike. Proficiency in scripting or programming with at least one language (e.g., Python, PowerShell, Bash, Ruby). Strong knowledge of