Digital Forensics and Incident Response (DFIR) Consultant

The Role

This position involves responding to active cyber incidents, conducting forensic acquisition and analysis of physical and virtual systems, reviewing host and appliance logs, correlating events into timelines, and applying mitigation strategies to contain and remediate threats such as ransomware and cyber-extortion attacks.

Skills & Experience

Candidates should have at least two years in DFIR, strong knowledge of Windows and Unix/Linux environments, familiarity with EDR/EPP platforms, malware analysis tools, and forensic acquisition methodologies. Understanding of storage technologies including RAID, NAS, SAN, and Fibre Channel is also expected.

Who It Suits

This role suits a technically grounded forensics or incident response professional who is comfortable engaging with legal counsel, insurance partners, and executive stakeholders during high-pressure breach scenarios, and who stays current with evolving threat landscapes and adversary techniques.