Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote
Core
Senior individual contributor leading expert-level digital forensics and incident response investigations for clients across various industries.
Role type
Principal Consultant, Reactive Services (DFIR)
Builds
Incident response outcomes, forensic analysis, and remediation guidance for security breaches.
Domain
Cybersecurity / Digital Forensics and Incident Response (DFIR)
Deliverable
client delivery
Required skills
Digital forensics and incident response (DFIR), enterprise-scale incident investigation, forensic acquisition and analysis, host/network/cloud investigation, DFIR tooling (EnCase, FTK, Volatility), multi-OS operational experience (Windows, Linux, macOS), threat landscape analysis
Preferred skills
Cloud and hybrid environment incident response, MITRE ATT&CK knowledge, malware triage and reverse engineering, consulting background
Technologies
EnCase, FTK, SleuthKit, Volatility
Responsibilities
Lead and execute digital forensics and incident response investigations, serve as technical lead on incident response engagements, conduct advanced forensic analysis of systems and logs, provide clear technical findings and remediation guidance, support development of incident response playbooks, contribute to knowledge sharing and mentorship
Seniority
Principal, senior individual contributor