Principal Consultant, DFIR

Job Summary

Representing a leading cybersecurity firm as a skilled technical forensic and consulting expert, the full-time Principal Consultant, DFIR will manage incident response engagements, conduct advanced forensic analysis, and provide after-hours support remotely.

Key responsibilities

• Forensically lead incident response engagements, guiding clients through the entire incident response lifecycle from detection to recovery
• Conduct advanced forensic analysis to identify the scope and impact of security incidents, including malware analysis and reverse engineering
• Provide career development for a team of 3-4 forensic consultants, mentoring and guiding their professional growth

Required qualifications

• Experience in Cybersecurity, Computer Science, Information Technology, or related fields, with significant experience as a Senior or Principal Forensic Consultant
• Industry certifications or equivalent professional experience demonstrating mastery in Digital Forensics and Incident Response
• Advanced proficiency in digital forensic tools such as ELK, Axiom, Encase, and FTK
• In-depth knowledge of cybersecurity principles and best practices, with experience in network analysis and intrusion detection tools
• Ability to work under pressure, manage multiple priorities, and provide after-hours support as needed