Principal DFIR Consultant – Remote (Anywhere in the U.S.)

The Role

This senior individual contributor position leads the most complex and high-visibility incident response engagements, including ransomware, APT, and insider threat cases. Day to day involves conducting advanced host forensics, network analysis, cloud forensics, and malware triage, while also overseeing junior staff work, reviewing deliverables, and contributing to methodology development.

Skills & Experience

Candidates must demonstrate expert-level proficiency across host forensics, network forensics, malware reverse engineering, cloud investigations, and threat actor attribution. Experience leading critical DFIR engagements and mentoring analyst-level staff is essential. The posting does not specify particular certifications or tooling beyond these technical domains.

Who It Suits

This role suits a seasoned DFIR professional who thrives operating as a practice-wide technical authority and is equally comfortable leading client-facing investigations and shaping team methodology. Those who enjoy mentoring others, contributing to business development, and stepping in as a trusted resource during high-pressure, high-volume periods will find this role rewarding.