Principal Consultant, Digital Forensics and Incident Response (DFIR) (Remote)
Core
Lead complex digital forensics and incident response (DFIR) investigations for clients, including ransomware and business email compromise, while mentoring a team of 3-4 consultants.
Role type
Principal Consultant, Digital Forensics and Incident Response (DFIR)
Builds
Forensic reports, incident response playbooks, and threat intelligence for client recovery and prevention.
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Advanced digital forensic analysis, malware analysis and reverse engineering, network analysis, intrusion detection, incident response lifecycle management, team leadership and mentoring, technical report writing, stakeholder communication
Preferred skills
Industry certifications (e.g., GCFA, GCFE, EnCE), experience with ELK, Axiom, Encase, FTK, deep knowledge of threat tactics and attacker techniques
Technologies
ELK, Axiom, Encase, FTK, Open-Source forensic tools, network analysis tools, intrusion detection systems
Responsibilities
Lead incident response engagements from detection to recovery, conduct advanced forensic analysis including malware reverse engineering, manage investigations of varying complexity (e.g., BEC, Ransomware), mentor and develop a team of 3-4 consultants, provide after-hours on-call support, spearhead R&D on forensic tools and methodologies, review and guide team forensic reports
Seniority
Principal, hands-on IC with mentorship responsibilities
