Principal Consultant, DFIR

The Role

This position involves leading end-to-end incident response engagements, from initial identification and containment through to forensic investigation, log analysis, and report writing. The practitioner also conducts threat actor communications and ransomware negotiations when required, operating independently under pressure across complex, high-stakes cybersecurity incidents.

Skills & Experience

Candidates must demonstrate deep technical expertise in digital forensics and incident response across servers and end-user devices, alongside strong skills in log analysis, root cause analysis, and clear written communication. Experience conducting threat actor negotiations and sound judgment in high-pressure environments are also expected.

Who It Suits

This role suits a seasoned DFIR professional who thrives in fast-moving incident environments and is comfortable leading engagements independently from start to finish. Someone who combines rigorous technical forensic skills with the composure and communication ability required to manage sensitive threat actor interactions will excel here.