Senior Digital Forensics and Incident Response (DFIR) Consultant
CYPFER
Miami, FL
The Role
This senior-level consulting position sits at the intersection of hands-on technical execution and workstream leadership. Day to day, the role involves forensic disk and memory acquisition, IOC triage, log review, event correlation, and timeline construction across active incident response and post-breach recovery engagements for insurance, legal, and enterprise clients.
Skills & Experience
Candidates need 3–5+ years in DFIR or related cybersecurity roles, with advanced forensic investigation capability. GCFA or GCFR certification is strongly preferred. Practical experience with EDR platforms such as CrowdStrike Falcon, SIEM/SOAR tools, Python and/or PowerShell scripting, and chain-of-custody compliance is required.
Who It Suits
This role suits an experienced DFIR practitioner ready to step into a delivery leadership capacity — someone comfortable presenting findings to clients under pressure, coordinating small teams, and deploying to client sites at short notice. Strong communicators with a forensic technical foundation will thrive here.
Typical advertised salary for Incident Response roles in United States: $123,000–$179,000 (median $149,000 — from 159 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in United States →
Certifications mentioned: GCFA · GCFR — find training for these on the DFIR Training Finder.
