Senior Consultant, DFIR, Reactive Services

This is a fully remote position, open to applicants in California.

📋 Description

• Conduct digital forensics and incident response investigations related to ransomware, unauthorized access, and various cybersecurity incidents.

• Manage assigned investigative workstreams and communicate findings and obstacles to the engagement lead.

• Examine endpoint, host, network, identity, and cloud evidence to determine incident timelines, attacker behavior, and the extent of the compromise.

• Carry out forensic acquisition and analysis of systems, memory, logs, and endpoint telemetry.

• Aid in incident containment, remediation, and recovery through evidence-based recommendations.

• Record investigative activities and create technical reports and client updates.

• Adhere to evidence handling and chain-of-custody protocols.

• Work collaboratively with engagement teams to ensure timely and high-quality client outcomes.

• Contribute to the development of investigation playbooks, tools, and knowledge sharing.

• Stay informed about emerging threats, attacker techniques, and forensic methodologies.

• Present findings directly to clients while collaborating with Principal Consultants and Consulting Directors.

⛳️ Requirements

• Practical experience in enterprise DFIR.

• Proficient in forensic tools, evidence acquisition, and log analysis.

• Experience in investigating Windows environments.

• Familiarity with Linux, macOS, or cloud platforms.

• Strong technical judgment and effective client communication skills.

• Relevant degree or equivalent hands-on experience.

• Background in consulting or incident response services is preferred.

• Preferred knowledge in malware triage, scripting, and MITRE ATT&CK framework.

• Preferred certifications such as GCFA, GCFE, GCIH, or similar.

• Willingness to travel up to 20% is preferred.

• No immigration sponsorship is required; the employer will not sponsor work visas for this role.

🏝️ Benefits

• Restricted stock units.

• Bonus.

• Employee benefits are mentioned but not detailed.

• Reasonable accommodations for qualified individuals with disabilities or special needs.