DFIR Consultant
Core
Lead digital forensic and incident response investigations, analyzing security telemetry to determine attacker activity, scope, and root cause while supporting clients through containment and remediation.
Role type
Senior IC DFIR Consultant
Builds
Incident response engagements and forensic analysis for client cybersecurity incidents
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Digital forensics, incident response, threat hunting, EDR/SIEM analysis, Windows/Active Directory, Microsoft 365/Azure/Entra ID, networking, forensic acquisition, compromise assessment
Preferred skills
Mentoring junior consultants, technical leadership, DFIR certifications (GCFA, GCIH, GCFE, EnCE)
Technologies
EDR, SIEM, Microsoft 365, Azure, Entra ID, Windows, Active Directory
Responsibilities
Lead and conduct digital forensic and incident response investigations from triage to recovery; Investigate security incidents across endpoints, networks, and cloud environments; Analyse security telemetry to determine attacker activity and root cause; Conduct forensic acquisition, threat hunting, and compromise assessments; Communicate technical findings via investigation reports and remediation recommendations; Support DFIR capability maturity and mentor junior consultants
Seniority
Senior, hands-on IC with mentorship potential