DFIR Consultant

Job Summary

Leading emergency incident response engagements, the full-time hybrid PLAID ELITE DFIR Consultant will manage the entire investigation process from scoping to final reporting while utilizing the 7AI platform for evidence collection and analysis.

Key responsibilities

• Run scoping calls with clients and breach counsel to define engagement objectives and deliverables
• Manage end-to-end investigations, coordinating evidence collection and maintaining communication with clients and counsel
• Collect and analyze evidence across various platforms, validate AI-driven findings, and produce comprehensive reports for stakeholders

Required qualifications

• 8+ years of digital forensics and incident response experience, including client-facing roles
• Proven track record of leading emergency incident response engagements
• Expertise in enterprise forensics across host, network, cloud, and SaaS environments
• Hands-on experience with Velociraptor and scripting in Python or PowerShell
• Working knowledge of malware analysis and querying SIEM/EDR data