State Licensed DFIR Examiner

Job Summary

Seeking a State Licensed DFIR Examiner, the full-time position will manage cybersecurity incident investigations, conduct digital forensics, and engage in Threat Actor negotiations while working remotely and being available for on-call support.

Key Responsibilities:

• Lead and coordinate responses to cybersecurity incidents, including analysis and investigation of security breaches
• Conduct direct communications and negotiations with Threat Actors during ransomware and extortion incidents
• Prepare detailed incident reports and maintain accurate documentation of all investigations and response activities

Required Qualifications:

• Strong knowledge of digital forensics tools and techniques
• Experience with incident response frameworks and methodologies (e.g., NIST, SANS)
• Demonstrated experience in Threat Actor communications and high-stakes negotiations
• Understanding of ransomware and data-extortion ecosystems
• Strong written documentation skills for maintaining communication logs and negotiation summaries