Principal DFIR Investigator & Strategy Leader

Remote; San Francisco (CA); Remote; USD 190,000 - 270,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Holidays & PTO

Internet allowance

Retirement plan

Job summary

GuidePoint Security is seeking a Principal DFIR Consultant to lead the most complex investigations and shape the DFIR practice. You will oversee engagements, provide deep technical expertise, mentor senior staff, and contribute to methodologies, playbooks, and tools.

You will also drive client trust, lead pre-sales scoping, and represent the practice in industry forums while ensuring top-quality deliverables and consistent stakeholder communication.

Qualifications

• 8+ years hands-on DFIR experience including incident response and forensics.
• 10+ combined years of IT and information security experience.
• Lead or senior technical role on high-severity engagements.

Responsibilities

• Oversight & QA on complex engagements; review findings before client calls.
• Lead on the most complex investigations; set client communication standards.
• Advanced host forensics, network analysis, malware triage, cloud IR and attribution.
• Surge capacity to provide senior-level coverage during high-volume periods.

Skills

DFIR leadership

Incident response

Mentorship

Technical depth

Client communication

Education

GREM

GCFA

GCFE

GDAT

GCIH

GCIA

CISSP

Tools

Velociraptor

EDR

NDR

XDR

SIEM

Job description

GuidePoint Security is seeking a Principal DFIR Consultant to lead the most complex investigations and shape the DFIR practice. You will oversee engagements, provide deep technical expertise, mentor senior staff, and contribute to methodologies, playbooks, and tools.

You will also drive client trust, lead pre-sales scoping, and represent the practice in industry forums while ensuring top-quality deliverables and consistent stakeholder communication.