Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote Weekend Shift
Core
Senior individual contributor leading expert-level digital forensics and incident response investigations for clients across various industries.
Role type
Senior IC DFIR Consultant
Builds
Incident response engagements, forensic analysis, and remediation guidance
Domain
Cybersecurity / Digital Forensics and Incident Response
Required skills
DFIR investigation, forensic acquisition, evidence handling, host/network/cloud forensics, DFIR tool usage (EnCase, FTK, Volatility), Windows/Linux/macOS forensics, incident containment
Preferred skills
Large-scale incident response, MITRE ATT&CK knowledge, malware triage/reverse engineering, 24x7 security operations background, GCFA/GCFE/GCIH/CISSP certifications
Technologies
EnCase, FTK, SleuthKit, Volatility
Responsibilities
Lead DFIR investigations, conduct forensic acquisition and analysis, identify attacker activity and scope of compromise, deliver findings and remediation guidance, support playbook development, mentor team members
Seniority
Senior, hands-on IC