Senior Consultant, DFIR (Wed-Sun)

Role overview A senior digital forensics and incident response consultant role focused on modern enterprise environments that extend well beyond traditional endpoints into cloud platforms and SaaS applications. The consultant investigates threats across AWS, GCP, Azure, and M365 while helping shape an internal LLM-based investigative platform. The schedule is Wednesday through Sunday, 1:00 PM to 9:30 PM Eastern Time, fully remote within the United States, with a preference for candidates in the Mountain or Pacific time zones.

Responsibilities - Support and lead incident response engagements covering ransomware, nation-state threats, and cloud-native intrusions - Investigate identity-driven attacks across cloud and SaaS environments, including AWS, GCP, Azure, and Microsoft 365 - Conduct forensic analysis across Windows, macOS, and Linux systems, including host artifacts and network data - Use LLM-assisted tooling to triage logs, build timeline narratives, and surface anomalous patterns without sacrificing evidentiary rigor - Contribute to the design of an internal LLM-based investigative platform by translating field experience into prompts, logic, and guardrails - Produce reports and analysis held to the highest forensic quality standards

Requirements - Hands-on experience responding to threat activity as an IR consultant or SOC analyst - Strong understanding of Windows, macOS, and Linux fundamentals, core forensic artifacts, and network analysis - Familiarity with cloud-native investigations across AWS, GCP, and Azure, including sources like CloudTrail, VPC Flow Logs, GCP Admin Activity and Data Access logs, and Entra ID/M365 audit logs - Curiosity about LLM-assisted investigative tooling and a builder's mindset toward internal platform development - An unwavering commitment to high-quality investigation work

Benefits and work setup - Fully remote within the United States; preference for Mountain or Pacific time zones - Wednesday through Sunday schedule, 1:00 PM to 9:30 PM Eastern Time