Remote DFIR Specialist

Tokio Marine HCC International; Northern (KY); Hybrid; USD 87,000 - 131,000; Full time

Benefits offered by this job

Competitive salary

6% 401K match

20 days PTO and 2 floating days

Paid parental leave

Strong learning culture

Growth perspectives

Job summary

Vector3, Inc. in collaboration with Tokio Marine HCC CPLG hires a DFIR Consultant to join our incident response team.

You will apply investigative experience to support client incidents from initial triage through preservation, analysis, and reporting, working with a skilled team to deliver timely, defensible findings. You will collaborate across internal stakeholders, clients, and insurers, translating complex technical detail into actionable business guidance while adhering to defensible

Qualifications

• 4+ years of professional experience in digital forensics, incident response, security operations, or related investigative work.
• Experience with endpoint, server, and cloud log analysis in cyber incidents.
• Experience with DFIR tools, evidence handling, and report writing.
• Ability to manage multiple active matters with quality and deadlines.
• Excellent communication skills to explain complex concepts to stakeholders.

Responsibilities

• Perform triage, acquisition, preservation, and analysis of endpoint, server, cloud, and log evidence to determine scope and root cause.
• Develop accurate timelines, identify affected assets, and document findings in a clear and defensible manner.
• Prepare investigation updates and reports translating technical detail into actionable guidance for clients and insurers.

Skills

Digital forensics

Incident response

Security operations

Client communications

Artifact management

Education

Bachelor's degree in cyber security

Computer Science / IT related degree

Tools

DFIR tools

Evidence handling

Job description

Vector3, Inc. in collaboration with Tokio Marine HCC CPLG hires a DFIR Consultant to join our incident response team.

You will apply investigative experience to support client incidents from initial triage through preservation, analysis, and reporting, working with a skilled team to deliver timely, defensible findings. You will collaborate across internal stakeholders, clients, and insurers, translating complex technical detail into actionable business guidance while adhering to defensible