Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote
Core
Senior individual contributor leading expert-level digital forensics and incident response investigations for clients across various industries.
Role type
Senior IC DFIR Consultant
Builds
Incident response outcomes, forensic analysis, and remediation guidance for client security breaches
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
Digital forensics and incident response (DFIR), enterprise-scale incident investigation, forensic acquisition and analysis, host/network/cloud forensics, DFIR tooling (EnCase, FTK, Volatility), multi-OS investigation (Windows, Linux, macOS), threat landscape analysis
Preferred skills
Cloud/hybrid incident response, MITRE ATT&CK knowledge, malware triage/reverse engineering, consulting background, industry certifications (GCFA, GCFE, GCIH, CISSP)
Technologies
EnCase, FTK, SleuthKit, Volatility
Responsibilities
Lead and execute DFIR investigations across enterprise environments; Serve as technical lead on incident response engagements; Conduct advanced host, network, and cloud investigations; Perform forensic acquisition and analysis of systems, memory, and logs; Utilize industry-standard DFIR tooling; Collaborate with Consulting Directors and cross-functional teams; Provide technical findings and remediation guidance; Maintain up-to-date knowledge of emerging threats; Support development of incident response playbooks; Contribute to knowledge sharing and mentorship
Seniority
Senior, hands-on IC