Senior DFIR Examiner

Job Summary

To support clients in navigating incident response and recovery, the fully remote Senior DFIR Examiner will lead security incident investigations, analyze forensic data, and enhance team capabilities while maintaining client relationships post-engagement.

Key responsibilities

• Lead and participate in security incident and data breach investigations, analyzing forensic data to determine the scope of incidents
• Coordinate resources and tailor engagements to meet client-specific response needs, ensuring timely delivery
• Document findings and maintain client relationships to assist with long-term remediation efforts

Required qualifications

• 5+ years of experience in digital forensics, incident response, or related fields
• Proficient in investigating network breaches, business email compromise, and ransomware incidents
• Strong leadership skills with experience in managing complex client engagements
• Working knowledge of forensics across Windows, Linux, Unix, and MacOS
• Familiarity with disk forensics tools and SIEM tools for incident investigations