Principal Consultant, DFIR, Reactive Services (Unit 42)

The Role

This position involves leading and managing incident response engagements on a reactive basis, conducting host-based forensic analysis across Windows, Linux, and macOS environments, examining diverse log sources to uncover malicious activity, investigating data breaches, and providing clients with clear remediation guidance to strengthen their security posture.

Skills & Experience

Candidates should bring hands-on experience with forensic tools including EnCase, FTK, X-Ways, SIFT, and Splunk, alongside strong knowledge of IOC identification, log analysis across firewall, web, and database sources, and the ability to scope and lead complex investigations across multiple operating system platforms.

Who It Suits

This role suits a seasoned digital forensics and incident response professional who is comfortable operating at a senior level, advising clients under pressure, and collaborating across distributed teams. Those who thrive on varied, complex casework and want to operate at the forefront of enterprise-level threat response will find this role compelling.