DFIR Consultant - Remote (Anywhere in the U.S.)
Core
Perform Digital Forensics & Incident Response (DFIR) investigations including host forensics, network traffic analysis, malware triage, and BEC analysis for clients across various sectors.
Role type
DFIR Consultant (Technical Contributor)
Builds
Incident response investigations, forensic reports, and remediation strategies
Domain
Cybersecurity / Digital Forensics & Incident Response
Required skills
Host forensics, network traffic analysis, malware handling/triage, log review, BEC analysis, scripting/automation, technical communication
Preferred skills
EDR/NDR/XDR/SIEM/FW/NGAV experience, Velociraptor, cloud technologies (AWS, GWS, M365, Azure), threat intelligence awareness, GCFA/GCFE/GCIH/GCIA/GDAT/GREM/CISSP certifications
Technologies
Velociraptor, PowerShell, Python, Bash, Go, EDR, NDR, XDR, SIEM, FW, NGAV, AWS, Google Workspace, Microsoft 365, Azure
Responsibilities
Perform DFIR investigations under engagement lead direction, produce clear technical findings and remediation strategies, support client relationships during engagements, use scripting to automate DFIR tasks, maintain availability during high-severity incident surges
Seniority
Mid-level, hands-on IC