DFIR Consultant: Incident Response & Forensics Expert

IllTip; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

IllTip, a cybersecurity firm, seeks a hands-on DFIR Consultant for its incident response and forensics practice. You will work on breach response, forensic analysis and threat hunting for private sector and government clients.

You will contribute technically to investigations, produce deliverables for technical and executive audiences, and collaborate with senior consultants to maintain schedule and consistency. Travel up to 20% is possible.

Qualifications

• Hands-on experience across core DFIR disciplines: host forensics, network traffic analysis, malware handling, log review.
• Strong written and verbal communication with ability to present findings to varied audiences.
• Experience with scripting and automation to streamline DFIR tasks.
• Preferred: GCFA/GCFE/GCIH/GCIA/GDAT/GREM or CISSP certification; consulting experience.

Responsibilities

• Contribute technically to incident response and forensic investigations across host and network data.
• Produce clear engagement deliverables explaining findings, impact and remediation.
• Coordinate with engagement leads to keep investigations on schedule.
• Use scripting to automate recurring DFIR tasks and improve efficiency.
• Serve as technical point of contact with clients during engagements.
• Participate in on-call rotation for high-severity incidents.

Skills

DFIR disciplines

Communication

Scripting

Education

High school diploma + 5 years experience

Bachelor's degree + 2 years experience

Master's degree

Tools

EDR

SIEM

NDR

XDR

Python

PowerShell

Bash

AWS

Azure

Microsoft 365

Job description

IllTip, a cybersecurity firm, seeks a hands-on DFIR Consultant for its incident response and forensics practice. You will work on breach response, forensic analysis and threat hunting for private sector and government clients.

You will contribute technically to investigations, produce deliverables for technical and executive audiences, and collaborate with senior consultants to maintain schedule and consistency. Travel up to 20% is possible.