DFIR Consultant (Remote - US only)
A established cybersecurity firm that focuses exclusively on information security is hiring a DFIR Consultant for its Digital Forensics and Incident Response practice. This is a hands-on technical role working under senior consultants on investigations that span breach response, forensic analysis and proactive threat hunting. The practice serves a broad range of private-sector organizations and government agencies.
What you'll do
- Contribute technically to incident response and forensic investigations, including host forensics, network traffic analysis, malware triage, log review and business email compromise analysis
- Produce clear engagement deliverables that explain findings, business impact and practical remediation steps for both technical and executive audiences
- Coordinate with engagement leads and peers across concurrent investigations to keep work consistent and on schedule
- Use scripting and automation to streamline recurring DFIR tasks
- Support client communication during engagements as a reliable technical point of contact
- Take part in on-call rotation and extended availability during high-severity incident surges
What you need
- High school diploma with 5 years of relevant experience, or a bachelor's degree with 2 years of relevant experience, or a master's degree
- Hands-on experience across core DFIR disciplines such as host forensics, network traffic analysis, malware handling and log review
- Strong written and verbal communication skills, with the ability to present technical findings to varied audiences
- Preferred: experience with EDR, SIEM, NDR or XDR tools, scripting in Python, PowerShell or Bash, and cloud platforms such as AWS, Azure or Microsoft 365
- Preferred: GCFA, GCFE, GCIH, GCIA, GDAT, GREM or CISSP certification, or consulting experience
- Must be located in the United States; up to 20% travel may be required
Applicants must be based in: United States.
How to apply
Get the free i'llTip app to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.
Apply on i'llTipPrefer the website? Continue on illtip.comOr get the app: Android · iPhone
🔔 Get new jobs like this first: join i'llTip Jobs on Telegram · or get personal job alerts
More Cybersecurity & Data Protection jobs
Senior Security Engineer (Remote)
The posting does not state a country restriction; pay is in USD and the role includes occasional travel to the company's headquarters. A fast-growing healthcare company that partners with employers to redesign how care i…
Staff Security Engineer (Remote - US only)
This is a remote staff-level security role at a consumer health hardware and software company that builds connected products and AI-driven recovery features for customers in more than 30 countries. You will be a generali…
Threat Actor Engagement & Intelligence Consultant (Remote - US only)
S.). This is a client-facing consulting role within the threat intelligence and digital forensics group of a large, profitable cybersecurity services company that serves Fortune 500 firms and government agencies. The cor…
CMMC Compliance Lead (Remote - US only)
A US-based company that builds secure software delivery solutions for federal and commercial customers is hiring a customer-facing lead for CMMC Level 1 and Level 2 engagements. The role owns NIST SP 800-171 interpretati…
Vulnerability Research Engineer (Remote - Worldwide)
A fast-growing software security company that helps developers and security teams find, audit and manage third-party open source code is hiring a engineer to build and scale its patching infrastructure. The work centers …