Senior DFIR Consultant

The Role

This consultant leads full incident response lifecycles from triage through recovery, investigates attack vectors and adversary techniques, and conducts host and cloud forensic examinations across Windows, Linux, macOS and major cloud platforms, producing executive-level root cause analysis reports.

Skills & Experience

Requires strong expertise in memory forensics, disk imaging, log correlation, chain-of-custody practices, and familiarity with MITRE ATT&CK. Experience handling ransomware, BEC, identity compromise and cloud attacks is essential, alongside stakeholder communication and mentoring skills.

Who It Suits

Suited to an experienced DFIR professional comfortable leading investigations independently, mentoring junior analysts, and presenting findings to executives, auditors and legal teams across diverse enterprise environments.