Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Core
Lead digital forensics and incident response (DFIR) engagements for clients facing cyber threats like ransomware and data theft, guiding them from detection to recovery.
Role type
Principal Consultant, DFIR (Senior IC with mentorship)
Builds
Incident response engagements and forensic analysis reports
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Digital forensics, malware analysis, reverse engineering, network analysis, intrusion detection, threat intelligence, report writing, team mentoring
Preferred skills
Advanced proficiency in ELK, Axiom, Encase, FTK, Open-Source tools
Technologies
ELK, Axiom, Encase, FTK, Open-Source tools
Responsibilities
Forensically lead incident response engagements from detection to recovery; Conduct advanced forensic analysis including malware analysis and reverse engineering; Independently manage complex investigations like BEC and Ransomware; Provide career development and mentorship to a team of 3-4 consultants; Identify and explain attack vectors to guide mitigation; Convey complex forensic findings to technical and non-technical stakeholders; Provide comprehensive supporting evidence for written reports; Review and provide guidance on forensic reports; Collaborate to refine incident response processes; Spearhead R&D activities for forensic tools and techniques; Provide after-hours on-call support for critical incidents.