Senior Consultant, Digital Forensics and Incident Response (DFIR) (Remote)

Role overview

Lead forensic work on small to mid-sized cyber incident investigations while helping clients understand and respond to high-pressure events. You’ll contribute to engagements from initial detection through recovery, partnering with other responders and communicating findings to technical and non-technical audiences. The role is remote in the United States and includes rotating after-hours support.

Responsibilities

- Investigate incidents such as ransomware and business email compromise, assessing their scope and impact. - Analyze forensic evidence and, when needed, examine malware or reverse engineer it. - Explain attacker methods and likely entry points, and advise clients on mitigation and prevention. - Document evidence and findings in clear, well-supported reports. - Coordinate with clients, colleagues, and external partners; help improve response practices and tools. - Mentor less experienced colleagues and provide on-call or weekend coverage on a rotation.

Requirements

- Professional cybersecurity experience, supported by relevant education, certifications, or comparable work experience. - A record of forensic analysis and independently handling smaller investigations. - Practical knowledge of cybersecurity, network analysis, and intrusion detection tools. - Strong investigation skills, attention to detail, and ability to manage competing priorities under pressure. - Clear written and verbal communication, including the ability to explain technical findings to varied audiences. - Willingness to learn, share expertise, and provide rotating after-hours support.

Benefits and work setup

- Full-time remote role based in the United States. - Compensation includes equity; benefits include medical, dental, vision, retirement matching, paid leave, and professional development.