Senior Digital Forensics and Incident Response Consultant

This is a fully remote position, open to applicants in Ireland.

📋 Description

• Oversee small workstreams within ongoing incident response and recovery projects

• Collaborate with Consultants to ensure the quality of deliverables and alignment with client goals

• Organize workstreams, facilitate stand-up meetings, and monitor risks across active projects

• Confirm technical outputs and communicate interim findings to client stakeholders

• Manage client expectations and guide the development of client-ready deliverables

• Provide forensic acquisition, IOC triage, and recovery work packages

• Keep precise case notes and create client-ready artifacts

• Adhere to SOPs, QA standards, chain-of-custody, and compliance protocols

• Analyze triage collections and artifacts for signs of compromise and malicious activities

• Examine host-system and appliance logs for irregular activities

• Gather forensic disk and memory images from both physical and virtual endpoints and servers

• Facilitate event correlation and timeline development

• Perform independent threat research based on investigation IOCs

• Guide junior team members in focused research assignments

• Proactively escalate risks and operate under the guidance of a Manager or Senior Manager

• Engage in a rotating on-call schedule

⛳️ Requirements

• 3–5+ years of experience in incident response, digital forensics, or a related cybersecurity position

• Advanced skills in DFIR analysis, including in-depth forensic investigations and leading technical analysis workstreams

• GCFA or GCFR certification is highly preferred

• Capability to coordinate plans, tasks, and risks across an engagement workstream involving multiple contributors

• Experience in presenting interim findings to client stakeholders, managing expectations, and leading client-ready deliverables

• Basic proficiency in scripting with Python and/or PowerShell

• Working knowledge of endpoint forensics, including evidence acquisition, preservation, and artifact triage across physical and virtual systems

• Practical experience with EDR platforms such as CrowdStrike Falcon for threat hunting, host isolation, and telemetry collection

• Familiarity with SIEM, SOAR, or IR orchestration platforms

• Ability to perform estimations and short-cycle planning within an engagement workstream

• Strong customer service and consulting abilities

• Capacity to adhere to client and internal policies, procedures, and security practices

• Ability to remain calm, composed, and articulate in high-pressure client situations

• Excellent relationship management and communication skills

• High level of confidentiality when handling sensitive client and incident information

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience

• Industry certifications such as GCFA, GCFR, GCIH, CCFR, CCHF, AWS Certified, or similar are a significant advantage

• Exposure to threat hunting, network forensics, or malware analysis methodologies

• Experience in a professional services or consulting environment

• Willingness to work weekends and outside standard business hours as required

• Ability to travel on short notice to client locations, potentially within 24–48 hours' notice

🏝️ Benefits

• Remote work options

• Flexible travel arrangements with deployments typically lasting 1–2 weeks

• Opportunities to engage with insurance, legal, and enterprise client projects

• Participation in a rotating on-call schedule