Senior Consultant, DFIR

The Role

This position involves leading incident response and digital forensics engagements across complex, modern enterprise environments, including Windows endpoints, cloud platforms such as AWS, Azure, and GCP, and SaaS applications. Consultants investigate active threats, support clients through high-pressure incidents, and contribute to advancing DFIR methodologies for contemporary infrastructure.

Skills & Experience

Candidates require deep expertise in Windows forensics, endpoint investigation, and cloud-native forensics across major public cloud providers. Familiarity with SaaS application investigations, account takeover scenarios, threat actor tradecraft, and custom forensic scripting is essential. Strong client communication skills and an understanding of threat intelligence are equally important.

Who It Suits

This role suits a seasoned DFIR professional who is equally comfortable deep in technical analysis and communicating findings to clients under pressure. It is ideal for someone with a builder’s mindset who is eager to shape modern incident response practices and tackle sophisticated adversaries across an evolving, cloud-first threat landscape.