Digital Forensics & Incident Response

Boundless_ Expert Staffing; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Boundless Experts is seeking seasoned DFIR professionals to join our bench of on-call experts. This is not an entry-level role — we need someone who has been in the trenches on real incidents and can either roll up their sleeves to conduct forensics personally or step in to direct an incident/engagement and coordinate a response team, depending on what the client and situation require.

You'll be matched to client engagements based on your availability and expertise as if you were on their staff.

Qualifications

• Substantial hands-on DFIR experience.
• Ability to direct an incident or engagement when needed.
• Strong grounding in forensic methodology and incident response frameworks.
• Excellent communication under time pressure of active incidents.
• Certifications (GCFA, GCIH, GNFA, GREM, EnCE) are a plus but not required.
• Must be based in and authorized to work in the United States.

Responsibilities

• Conduct end-to-end digital forensic investigations (host, network, cloud, and/or mobile).
• Lead or support active incident response engagements from triage through containment, eradication, and recovery.
• Direct and coordinate response efforts across a team when serving in a lead capacity.
• Perform evidence collection, chain-of-custody handling, and forensic analysis to regulatory scrutiny.
• Communicate findings clearly to technical stakeholders and client leadership.
• Produce clear, defensible incident reports and forensic documentation.

Skills

DFIR experience

Team coordination

Forensic methodology

Communication skills

Certifications (GCFA/GCIH/GNFA/GREM/En

US work authorization

Job description

Boundless Experts is a cybersecurity staffing firm built around a surgecapacity model: rather than employing a single fixed team, we maintain a vetted network of experienced practitioners who can be deployed — individually or in teams — onto client incidents, assessments, and long-term engagements as demand arises. This lets our experts choose the level of commitment that fits their life (part-time, full-time) while giving clients fast access to senior-level talent without the overhead of a full-time hire. Boundless handles client sourcing, contracting, and engagement logistics so our experts can focus on the technical work.

www.BoundlessExperts.com

The Role

We're looking forseasoned Digital Forensics and Incident Response (DFIR) professionals to join our bench of on‑call experts. This is not an entry‑level role — we need someone who has been in the trenches on real incidents and can either roll up their sleeves to conduct forensics personally or step in to direct an incident/engagement and coordinate a response team, depending on what the client and situation require.

You'll be matched to client engagements based on your availability and expertise as if you were on their staff.

What You'll Do

• Conduct end-to-end digital forensic investigations (host, network, cloud, and/or mobile, depending on background)
• Lead or support active incident response engagements, from initial triage through containment, eradication, and recovery
• Direct and coordinate response efforts across a team when serving in a lead capacity
• Perform evidence collection, chain‑of‑custody handling, and forensic analysis to a standard that can withstand legal or regulatory scrutiny
• Communicate findings clearly to both technical stakeholders and client leadership
• Produce clear, defensible incident reports and forensic documentation

What We're Looking For

• Substantial hands‑on experience in DFIR — this is a seasoned‑practitioner role, not a training ground
• Demonstrated ability to work effectively as part of a team, as well as the judgment and experience to direct an incident or engagement when called upon
• Strong technical grounding in forensic methodology, incident response frameworks, and evidence handling
• Excellent communication skills, particularly under the time pressure of an active incident
• Relevant certifications (e.g., GCFA, GCIH, GNFA, GREM, EnCE, or equivalent) are a plus but not required if experience speaks for itself
• Must be based in and authorized to work in the United States

Engagement Structure

• Available as part‑time or full‑time, depending on your availability and client demand
• Engagement‑based work — you may be placed on a single investigation or a longer‑running incident response retainer
• Compensation aligned with seniority and role (individual contributor forensics vs. engagement lead)

Boundless Staffing, LLC does business as Boundless Experts. This posting is for U.S.-based candidates only.