Principal Digital Forensics Incident Response Consultant

Kivu Consulting (a part of Quorum Cyber); Orlando (FL); Remote; USD 150,000 - 165,000; Full time

Benefits offered by this job

Flexible PTO

Medical, Dental, and Vision

401k

Remote Work

Job summary

A leading consulting firm is seeking a Principal Digital Forensics Incident Response Consultant. This full-time role in Orlando, FL, requires strong incident response and forensics expertise, with a focus on client engagements. Ideal candidates will possess extensive information security experience, technical skills in various areas, and the ability to mentor junior staff. This position offers flexible PTO, medical benefits, and the possibility for remote work.

Qualifications

• Minimum 5-8 years of information security experience.
• Must have at least 3 years of client-facing consulting experience.
• Technical expertise in at least three specified areas.

Responsibilities

• Manage consulting engagements in incident response and forensics.
• Recommend specific counter-measures and mitigating controls.
• Assist with scoping and mentoring less experienced staff.

Skills

Information security experience

Consulting experience

Windows disk forensics

Network Security Monitoring

Linux disk forensics

Malware analysis

Cloud services knowledge

Education

Bachelor's or Master's degree in a technical field

Tools

Python

Job description

Overview

Join to apply for the Principal Digital Forensics Incident Response Consultant role at Kivu Consulting (a part of Quorum Cyber).

Base pay range

$150,000.00/yr - $165,000.00/yr

Job Description

Kivu Consulting’s Incident Response practice is rapidly growing, and we are hiring a Principal Consultant in Incident Response to work with our expansive customer base. We are continuing to enhance our incident response, forensics, and threat hunting team capabilities. By joining Kivu Consulting, you will be part of a highly specialized team to respond to data breaches in complex business environments using a variety of tools and techniques. As a teammate, you will work in a fast-paced and highly collaborative environment alongside a diverse and talented team in support our mission of providing world-class incident response services to our clients.

Required Knowledge, Skills, Abilities

• Minimum 5-8 years of information security experience


• Minimum 3 years of professional consulting experience in a client facing capacity


• Technical expertise in at least three of the following areas:


• Windows disk and memory forensics


• Network Security Monitoring (NSM), network traffic analysis, and log analysis


• Unix or Linux disk and memory forensics


• Static and dynamic malware analysis


• Applied knowledge in at least one scripting or development language (such as Python)


• Thorough understanding of enterprise security controls in Active Directory / Windows environments


• Cloud services such as Azure, AWS and GCP


• Must be eligible to work in United States

Preferred Requirements

• Ability to leverage project management skills to effectively budget, scope, and execute engagements


• Ability to manage multiple projects and manage tight deadlines


• Superior communication skills including precise and detail focused writing ability


• Ability to lead a team of highly technical security professionals


• Ability to prepare and review customized contracts for IR consulting services


• Willingness to travel up to 30%


• Bachelor’s or Master’s degree in a technical field

Responsibilities and Duties

• Manage consulting engagements, with a focus on incident response and forensics. Provide both subject matter expertise and project management experience to serve as the “point person” for client engagements


• Recommend and document specific counter-measures and mitigating controls


• Assist with scoping prospective engagements, participating in engagements from kickoff through full remediation, and mentoring less experienced staff


• Identify, market, and develop new business opportunities


• Develop comprehensive and accurate reports and presentations for both technical and executive audiences


• Utilize Mcrosoft technology to conduct large-scale investigations and examine host and network-based sources of evidence


• Mentor staff, providing feedback and coaching, and grow their technical and consulting skills


• Improve Kivu's business processes and incident response methodologies

Equipment Used

All equipment required to perform duties and tasks were previously described.

Physical / Environmental Factors

The physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Kivu Consulting considers applicants for all positions without regards to race, color, national origin, age, religion, sex, marital status, veteran or military status, disability, or any other legally protected status. Kivu Consulting is an Equal Opportunity Employer.

Benefits

• Flexible PTO


• Medical, Dental, and Vision


• 401k


• Remote Work

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Computer and Network Security

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.