Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote
Core
Lead and produce deliverables for reactive incident response engagements, guiding clients through forensic investigations and containment.
Role type
Principal Consultant, Digital Forensics and Incident Response (DFIR)
Builds
Incident response reports, forensic analysis results, and remediation strategies for client security posture improvement.
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Incident response leadership, host-based forensics (Windows/Linux/macOS), data breach investigation, forensic tool proficiency (EnCase, FTK, X-Ways, SIFT, Splunk), bilingual communication (English/Spanish)
Preferred skills
Executive presence, public speaking, conference presentations, C-suite interfacing
Technologies
EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark
Responsibilities
Manage incident response engagements from scoping to containment, perform host-based analysis to identify IOCs, examine logs to identify attack vectors, investigate data breaches, provide actionable remediation recommendations, mentor junior team members
Seniority
Principal, hands-on IC with client leadership
