Principal DFIR Consultant

The Role

This senior consulting position leads digital forensics and incident response engagements, with a focus on business email compromise and ransomware cases. Day to day, the work spans forensic investigation, log and artifact analysis, containment support, client communication, team mentorship, and the development of operational procedures and best practices.

Skills & Experience

The role requires advanced expertise in digital forensics and incident response, including analysis of logs, network data, and system artifacts. Experience handling BEC and ransomware incidents is central. Leadership capability and the ability to build client and carrier relationships are equally important alongside strong technical investigative skills.

Who It Suits

This position suits an experienced DFIR professional ready to operate at a principal or lead level, balancing hands-on investigative work with team development and client management. Someone comfortable guiding junior practitioners, driving continuous improvement, and communicating complex findings clearly to non-technical stakeholders will thrive here.