Senior DFIR Consultant – Engagement Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead incident response initiatives for external clients, carrying out digital forensics investigations, malware analysis, and threat actor identification.

• Offer 24/7 remote incident response services to manage active threats, preserve evidence, and reduce business disruption.

• Perform forensic analyses of compromised systems, networks, and cloud infrastructures.

• Present executive-level briefings and written reports that translate technical findings into assessments of business impacts and actionable recommendations.

• Collaborate with IT teams, legal advisors, insurance providers, law enforcement, and executive leadership.

• Offer strategic advice on ransomware negotiations, business email compromise, insider threats, and advanced persistent threat incidents.

• Mentor junior consultants and analysts, ensuring quality assurance on client deliverables.

• Maintain thorough case documentation, track time, and provide engagement status updates.

• Work together with insurance brokers, managed service providers, and law firms on incident response efforts.

• Investigate emerging threats, attack methodologies, and forensic techniques.

• Contribute to blogs, conference presentations, and educational materials for clients.

• Create scopes of work and cost estimations.

• Identify opportunities for expanded client engagement.

• Assist with client presentations, capability demonstrations, and proposal creation.

• Ensure deliverables adhere to quality standards and meet agreed timelines and budgets.

• Travel as necessary.

⛳️ Requirements

• Bachelor's degree with a minimum of 5 years in the Cyber Security field, OR completion of the Zurich Cybersecurity Technician Apprentice program with Cyber Security Certification and at least 6 years of experience in the Cyber Security domain, OR a High School Diploma or equivalent combined with a minimum of 7 years of experience in the Cyber Security sector.

• Advanced knowledge in Digital Forensics & Incident Response.

• Intermediate understanding of Threat Intelligence & Malware Analysis.

• Advanced skills in Client Communication & Stakeholder Management.

• Advanced expertise in Windows/Linux Operating System Forensics.

• Intermediate skills in Network Forensics & Log Analysis.

• Intermediate knowledge of Cloud Security (Azure/AWS/M365).

• Advanced proficiency with forensic tools such as EnCase, FTK, X-Ways, Volatility, and Binalyze.

• Advanced expertise in Ransomware & Business Email Compromise investigations.

• Advanced skills in Report Writing & Executive Communication.

• Intermediate proficiency in Project Management.

• Experience in Threat Actor Communications.

• No employment sponsorship will be provided.

• Ability to work remotely within the U.S.

• Willingness to travel for business as required.

🏝️ Benefits

• Eligibility for a short-term incentive bonus set at 15%.

• Competitive compensation package.

• Comprehensive benefits for employees and their families.

• Opportunities for growth, inclusion, and a supportive work environment.

• Potential for merit-based salary increases.