Senior DFIR Consultant

GuidePoint Security; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group Medical Insurance options

Group Dental Insurance

12 corporate holidays and FlexibleTime

Mobile phone and home internet access

Retirement plan eligibility

Pet Benefit Option

Job summary

GuidePoint Security is seeking a seasoned DFIR Lead to drive investigations across host forensics, network traffic analysis, and malware triage for diverse clients in the United States. You will author comprehensive deliverables detailing findings and remediation strategies, and you will leverage automation and scripting to boost engagement efficiency.

Collaborating with peers, you’ll share findings and coordinate high-quality results, while remaining available outside standard hours for

Qualifications

• 7 years of total experience in IT and information security.
• 4+ years of hands-on incident response investigation experience.
• Proficiency in host forensics, network traffic analysis, malware handling, and BEC analysis.
• Strong written and verbal communication skills.
• Ability to travel up to 20%

Responsibilities

• Lead and perform DFIR investigations including host forensics, network traffic analysis, and malware triage
• Author comprehensive technical and managerial deliverables detailing findings and remediation strategies
• Utilize automation, orchestration, and scripting to improve engagement efficiency
• Collaborate with peers to share findings and coordinate high-quality results
• Maintain availability outside standard business hours for high-severity incident surges
• Participate in on-call rotations as required

Skills

Host forensics

Network traffic analysis

Malware handling

BEC analysis

Scripting

Communication skills

Education

7 years IT/security experience

4+ years incident response

Tools

EDR

NDR

XDR

SIEM

Velociraptor

Job description

Responsibilities

• Lead and perform DFIR investigations including host forensics, network traffic analysis, and malware triage
• Author comprehensive technical and managerial deliverables detailing findings and remediation strategies
• Utilize automation, orchestration, and scripting to improve engagement efficiency
• Collaborate with peers to share findings and coordinate high-quality results
• Maintain availability outside standard business hours for high-severity incident surges
• Participate in on-call rotations as required

Requirements

• 7 years of total experience in IT and information security
• 4+ years of hands-on incident response investigation experience
• Proficiency in host forensics, network traffic analysis, malware handling, and BEC analysis
• Strong written and verbal communication skills
• Ability to travel up to 20%

Preferred Qualifications

• Prior experience in consulting or professional services
• Experience with EDR, NDR, XDR, SIEM, or Velociraptor
• Proficiency in PowerShell, Python, Bash, or Go
• Experience with AWS, Google Workspace, Microsoft 365, or Azure
• Relevant certifications such as GCFA, GCFE, GCIH, GCIA, GDAT, GREM, or CISSP

Benefits

• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and Flexible Time Off (FTO)
• Mobile phone and home internet allowance
• Retirement plan eligibility
• Pet Benefit Option

About the Company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security, serving as a trusted advisor to more than 6,200 customers.