Remote DFIR Consultant - Incident Response & Forensics

AprosSyber; Miami (FL); Remote; USD 100,000 - 150,000; Full time

Job summary

AprosSyber is seeking a Senior Consultant to lead small incident response workstreams and guide Consultants, ensuring deliverable quality and alignment with client objectives. You will own workstream planning, validate outputs, and present interim findings to client stakeholders while performing hands-on DFIR and post-breach recovery across insurance, legal, and enterprise engagements.

This role is remote but travel may be required on short notice.

Qualifications

• 3-5+ years in incident response or digital forensics.
• GCFA or GCFR certification strongly preferred.
• Coordinate workstreams and manage risks across engagements.
• Experience presenting interim findings to client stakeholders.
• Basic scripting to automate forensic tasks (Python/PowerShell).
• Willingness to travel up to 50% with short-notice deployments.

Responsibilities

• Lead small workstreams and coordinate task execution across the team.
• Own workstream planning, stand-ups, and risk tracking.
• Validate technical outputs; present interim findings to clients.
• Deliver client-ready artefacts and maintain case notes.
• Perform DFIR and post-breach recovery tasks.
• Travel to client sites on short notice and participate in on-call rotations.

Skills

Incident response leadership

Digital forensics

Client stakeholder communication

Team coordination

Scripting (Python/PowerShell)

On-call flexibility

Education

Bachelor's degree in Cybersecurity/Computer Science/IT

Tools

CrowdStrike Falcon

EDR platforms

SIEM/SOAR

Job description

AprosSyber is seeking a Senior Consultant to lead small incident response workstreams and guide Consultants, ensuring deliverable quality and alignment with client objectives. You will own workstream planning, validate outputs, and present interim findings to client stakeholders while performing hands-on DFIR and post-breach recovery across insurance, legal, and enterprise engagements.

This role is remote but travel may be required on short notice.