Senior DFIR Incident-Response Lead (Remote)

Cypfer; Ireland; Remote; EUR 90,000 - 130,000; Full time

Job summary

Cypfer is seeking a Senior Consultant to lead small workstreams in incident response and recovery engagements. You will coordinate Consultants, own planning, validate outputs, and present interim findings while hands-on DFIR work across insurance, legal, and enterprise client engagements.

The role blends technical execution with service delivery leadership, requiring strong communication and the ability to travel on short notice for client sites as needed.

Qualifications

• Bachelor's degree or equivalent hands-on experience.
• Certifications such as GCFA/GCFR are strongly preferred.

Responsibilities

• Lead small workstreams within incident response engagements.
• Coordinate task execution across team and ensure deliverable quality.
• Own workstream planning, stand-ups, and risk tracking.
• Validate technical outputs and present interim findings to clients.
• Deliver forensic acquisition, IOC triage, and recovery steps.
• Maintain case notes and client-ready artefacts following SOPs.
• Escalate risks and maintain chain-of-custody compliance.
• Analyze IoCs and triage host logs for malicious activity.
• Perform deployment-wide event correlation and timelines.

Skills

Incident response

Digital forensics

DFIR analysis

Python scripting

PowerShell scripting

Client communication

Team leadership

Threat hunting

GCFA/GCFR

Education

Bachelor's degree in cybersecurity/CS/IT

Tools

CrowdStrike Falcon

SIEM

SOAR

Job description

Cypfer is seeking a Senior Consultant to lead small workstreams in incident response and recovery engagements. You will coordinate Consultants, own planning, validate outputs, and present interim findings while hands-on DFIR work across insurance, legal, and enterprise client engagements.

The role blends technical execution with service delivery leadership, requiring strong communication and the ability to travel on short notice for client sites as needed.