DFIR Consultant (Remote - US only)

IllTip; United States; A distancia; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

IllTip, a cybersecurity firm, seeks a hands-on DFIR Consultant for its incident response and forensics practice. You will work on breach response, forensic analysis and threat hunting for private sector and government clients.

You will contribute technically to investigations, produce deliverables for technical and executive audiences, and collaborate with senior consultants to maintain schedule and consistency. Travel up to 20% is possible.

Formación

• Hands-on experience across core DFIR disciplines: host forensics, network traffic analysis, malware handling, log review.
• Strong written and verbal communication with ability to present findings to varied audiences.
• Experience with scripting and automation to streamline DFIR tasks.
• Preferred: GCFA/GCFE/GCIH/GCIA/GDAT/GREM or CISSP certification; consulting experience.

Responsabilidades

• Contribute technically to incident response and forensic investigations across host and network data.
• Produce clear engagement deliverables explaining findings, impact and remediation.
• Coordinate with engagement leads to keep investigations on schedule.
• Use scripting to automate recurring DFIR tasks and improve efficiency.
• Serve as technical point of contact with clients during engagements.
• Participate in on-call rotation for high-severity incidents.

Conocimientos

DFIR disciplines

Communication

Scripting

Educación

High school diploma + 5 years experience

Bachelor's degree + 2 years experience

Master's degree

Herramientas

EDR

SIEM

NDR

XDR

Python

PowerShell

Bash

AWS

Azure

Microsoft 365

Descripción del empleo

A established cybersecurity firm that focuses exclusively on information security is hiring a DFIR Consultant for its Digital Forensics and Incident Response practice. This is a hands-on technical role working under senior consultants on investigations that span breach response, forensic analysis and proactive threat hunting. The practice serves a broad range of private-sector organizations and government agencies.

Responsibilities

• Contribute technically to incident response and forensic investigations, including host forensics, network traffic analysis, malware triage, log review and business email compromise analysis
• Produce clear engagement deliverables that explain findings, business impact and practical remediation steps for both technical and executive audiences
• Coordinate with engagement leads and peers across concurrent investigations to keep work consistent and on schedule
• Use scripting and automation to streamline recurring DFIR tasks
• Support client communication during engagements as a reliable technical point of contact
• Take part in on-call rotation and extended availability during high-severity incident surges

Requirements

• High school diploma with 5 years of relevant experience, or a bachelor's degree with 2 years of relevant experience, or a master's degree
• Hands-on experience across core DFIR disciplines such as host forensics, network traffic analysis, malware handling and log review
• Strong written and verbal communication skills, with the ability to present technical findings to varied audiences
• Preferred: experience with EDR, SIEM, NDR or XDR tools, scripting in Python, PowerShell or Bash, and cloud platforms such as AWS, Azure or Microsoft 365
• Preferred: GCFA, GCFE, GCIH, GCIA, GDAT, GREM or CISSP certification, or consulting experience
• Must be located in the United States; up to 20% travel may be required

Applicants must be based in: United States.