DFIR Consultant
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
How well do you match this job?
Key details
- Location
- United States
- Work style
- Remote
- Level
- Senior
- Job type
- Full-time
- Experience
- 5–8 yrs
- Function
- Operations & Strategy
- Focus area
- other
- Posted
- 15h ago
Skills
About the role
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a DFIR Consultant based in the United States.
We are seeking a skilled Digital Forensics and Incident Response (DFIR) Consultant to help organizations investigate, respond to, and recover from complex cybersecurity incidents. In this hands-on role, you will conduct forensic investigations, analyze threats, and support incident response engagements across diverse industries. Working alongside experienced senior consultants and multidisciplinary security teams, you will contribute to identifying threats, understanding attack patterns, and minimizing business impact. You will have opportunities to work across host forensics, network analysis, malware investigations, and threat intelligence. This role offers an environment built around technical excellence, collaboration, continuous learning, and professional development. It is an excellent opportunity to deepen your expertise while helping organizations strengthen their cybersecurity resilience.
Accountabilities:
-
Digital Forensics and Incident Investigations: Conduct hands-on DFIR investigations under the guidance of senior engagement leads, performing host forensics, network traffic analysis, malware handling and triage, log reviews, and Business Email Compromise (BEC) investigations.
-
Incident Response Delivery: Support reactive incident response, forensic investigations, proactive threat discovery, threat hunting, and Purple Team exercises in collaboration with offensive security professionals.
-
Technical Analysis and Reporting: Analyze forensic evidence, identify suspicious activity, document findings, and produce accurate technical reports outlining investigation results, business impact, and practical remediation recommendations for technical and management audiences.
-
Client Engagement and Communication: Support client relationships throughout investigations by communicating technical findings, providing guidance, coordinating activities, and maintaining clear and timely updates.
-
Team Collaboration: Work closely with fellow consultants and engagement leads across multiple concurrent engagements, sharing insights and coordinating investigative activities to ensure consistent, high-quality delivery.
-
Automation and Process Improvement: Leverage scripting and automation to streamline forensic workflows, reduce repetitive tasks, and improve investigation efficiency.
-
Continuous Learning and Development: Stay informed about emerging cyber threats, attacker techniques, investigative methodologies, and industry technologies while continuously developing expertise across core DFIR disciplines.
-
Practice Development: Contribute to the evolution of cybersecurity services and investigative capabilities to address emerging threats and changing client requirements.
-
Operational Ownership and Availability: Maintain availability outside standard business hours during high-severity incidents, participate in on-call rotations when required, proactively identify delivery or communication gaps, and demonstrate professionalism, initiative, and accountability throughout engagements.
-
Education and Experience: High school diploma with at least five years of relevant experience, a bachelor's degree with at least two years of experience, or a master's degree.
-
DFIR Technical Expertise: Hands-on experience across core digital forensics and incident response disciplines, including host forensics, network traffic analysis, malware handling and triage, log review, and Business Email Compromise investigations.
-
Investigation and Analytical Skills: Ability to investigate complex technical issues, interpret forensic evidence, identify suspicious behavior, and develop effective solutions in rapidly changing environments.
-
Communication Skills: Excellent written and verbal communication skills, with the ability to translate complex technical findings into clear,