Remote DFIR Consultant: Incident Response & Forensics

GuidePoint Security LLC; Oregon; Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Holidays & FTO

Phone & Internet stipend

Retirement plan

Pet benefit

Job summary

GuidePoint Security LLC is seeking a DFIR Consultant to perform investigations across engagements, including host forensics, network analysis, and malware triage. You will communicate findings clearly to clients while growing expertise in DFIR disciplines.

The role emphasizes collaboration with engagement leads, use of automation to improve efficiency, and availability during high-severity incidents. Travel up to 20% may be required.

Qualifications

• 5+ years of experience in DFIR or related field
• Hands-on experience across core DFIR disciplines: host forensics, network traffic analysis, malware handling/triage, log review, BEC analysis
• Strong written and verbal communication skills for technical and managerial audiences
• Experience presenting findings and remediation recommendations to clients or stakeholders
• Familiarity with AI tools to enhance investigations and tooling

Responsibilities

• Perform DFIR investigations as a contributing technical resource under engagement leads
• Support engagement communication, time management, and lifecycle coordination
• Produce clear, accurate engagement deliverables detailing findings, impact, and remediation
• Collaborate with peers across concurrent engagements to ensure high quality results
• Leverage scripting and automation to reduce manual DFIR tasks
• Develop and strengthen DFIR capabilities through ongoing learning and practice

Skills

DFIR

PowerShell

Python

Bash

Go

Incident response

Education

Bachelor's degree

Master’s degree

High School diploma

Tools

EDR

NDR

XDR

SIEM

FW

NGAV

Velociraptor

Job description

GuidePoint Security LLC is seeking a DFIR Consultant to perform investigations across engagements, including host forensics, network analysis, and malware triage. You will communicate findings clearly to clients while growing expertise in DFIR disciplines.

The role emphasizes collaboration with engagement leads, use of automation to improve efficiency, and availability during high-severity incidents. Travel up to 20% may be required.