Principal Consultant, DFIR- Reactive Services (Unit 42)
Core
Lead end-to-end incident response engagements, perform host-based forensics, and guide clients through data breach investigations and remediation.
Role type
Principal Consultant, reactive DFIR services
Builds
Incident response deliverables, forensic reports, and long-term security posture remediation plans
Domain
Cybersecurity, Digital Forensics, Incident Response
Deliverable
client delivery
Required skills
Incident response leadership, host-based forensics (Windows, Linux, Mac OS X), data breach investigation, network traffic analysis, forensic tool proficiency
Preferred skills
Executive presence, public speaking, industry publications, advanced certifications
Technologies
EnCase, FTK, X-Ways, SIFT, Splunk, Volatility
Responsibilities
Manage scoping and execution of incident response engagements; Perform host-based analysis to identify IOCs; Investigate data breaches using digital forensics tools; Examine logs from firewalls, web, and databases; Mentor junior team members; Communicate technical findings to technical and executive stakeholders
Seniority
Principal, hands-on IC with strategic client guidance
