DFIR Cyber Consultant | Incident Response Lead (Hybrid, DC)

Forensic Focus; Washington (District of Columbia); Hybrid; USD 123,000 - 179,000; Full time

Job summary

Forensic Focus is seeking a Cyber Consultant for DFIR level engagements in Washington, DC. The role is hybrid, mid-level, and full-time, focusing on incident response across servers, workstations, networks and SaaS platforms.

The candidate should have DFIR experience, proficiency with X-Ways, and familiarity with NIST/SANS incident response frameworks. On-call travel may be required to support active investigations.

Qualifications

• Proven DFIR experience with incident response engagements.
• Experience using DFIR tools and following NIST/SANS guidelines.
• Strong analytical, networking and OS knowledge; scripting is a plus.

Responsibilities

• Lead client-facing DFIR engagements and investigations.
• Collect evidence, perform root cause analysis and containment coordination.
• Produce detailed incident reports for varied audiences.
• Travel or on-call support for active investigations as needed.

Skills

DFIR experience

X-Ways

NIST/SANS frameworks

Analytical ability

Networking/OS knowledge

Scripting familiarity

Tools

X-Ways DFIR tools

Job description

Forensic Focus is seeking a Cyber Consultant for DFIR level engagements in Washington, DC. The role is hybrid, mid-level, and full-time, focusing on incident response across servers, workstations, networks and SaaS platforms.

The candidate should have DFIR experience, proficiency with X-Ways, and familiarity with NIST/SANS incident response frameworks. On-call travel may be required to support active investigations.