Senior Consultant, DFIR, Reactive Services (Unit 42) - Remote
Core
Investigate cybersecurity incidents across enterprise environments, conduct forensic analysis, and provide actionable findings to help clients contain and recover from breaches.
Role type
Senior hands-on IC digital forensics and incident response (DFIR) consultant
Builds
Incident response outcomes for enterprise clients
Domain
Cybersecurity / Digital Forensics
Deliverable
client delivery
Required skills
enterprise DFIR, forensic tools, evidence acquisition, log analysis, Windows forensics, Linux/macOS/cloud familiarity, incident containment, remediation, technical reporting, chain-of-custody procedures
Preferred skills
consulting or incident response services background, malware triage, scripting, MITRE ATT&CK knowledge, GCFA/GCFE/GCIH certifications
Technologies
forensic tools, endpoint telemetry, memory analysis, log analysis
Responsibilities
Execute digital forensics and incident response investigations involving ransomware and unauthorized access; own assigned investigative workstreams; analyze endpoint, host, network, identity, and cloud evidence; perform forensic acquisition and analysis of systems, memory, and logs; support incident containment and recovery; document investigative activities and prepare technical reports; follow evidence handling and chain-of-custody procedures; collaborate with engagement teams; contribute to investigation playbooks and knowledge sharing
Seniority
Senior, hands-on IC