DFIR Consultant

Job Summary

To support a growing Digital Forensics and Incident Response (DFIR) team, the full-time DFIR Consultant will manage client incidents from triage through evidence preservation and analysis, working remotely to deliver accurate and defensible findings.

Key Responsibilities

• Perform triage, acquisition, preservation, and analysis of digital evidence to determine incident scope and impact
• Communicate with internal stakeholders and clients, preparing updates and reports that translate technical findings into actionable guidance
• Contribute to the development of playbooks and procedures to enhance team efficiency and support continuous improvement initiatives

Required Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field
• 2+ years of professional experience in digital forensics, incident response, or related investigative work
• Experience with DFIR tools and evidence handling
• Strong understanding of endpoint, server, and cloud log analysis
• Preferred certifications such as CISSP, CISM, GCFE, or GCFA