Senior DFIR Consultant - Forensics & Incident Response

Trustwave; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401(k) with employer matching

Generous paid time off

Job summary

LevelBlue is seeking a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate cybersecurity incidents, conduct forensic investigations, and serve as the primary client contact from forensics through reporting.

The role demands deep technical expertise, sharp analysis, and the ability to meet client deadlines. Responsibilities include leading incident responses, coordinating containment and recovery, documenting

Qualifications

• Proven DFIR experience.
• Knowledge of digital forensics tools and techniques (X-Ways or similar).
• Experience with incident response frameworks (NIST/SANS).
• Analytical and problem-solving skills.
• Understanding of networks, OS, and security tech.
• Excellent written and verbal communication.
• Client-facing experience.
• Ability to manage multiple projects independently.
• Willingness to travel and participate in on-call rotations.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents.
• Analyse and investigate security breaches to determine root cause.
• Conduct digital forensic investigations on servers, endpoints, and networks.
• Prepare incident reports with a clear narrative for non-technical audiences.
• Collaborate with DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS teams; guide clients through investigations.
• Communicate status updates and align with incident response processes.

Skills

DFIR experience

Forensic tools

IR frameworks

Analytical skills

Networking & OS

Written & verbal comms

Client interfacing

Independent work

On-call / after-hours

Travel flexibility

Education

Bachelor's in Digital Forensics / CS

Tools

Azure

AWS

Oracle

GWP

Job description

LevelBlue is seeking a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate cybersecurity incidents, conduct forensic investigations, and serve as the primary client contact from forensics through reporting.

The role demands deep technical expertise, sharp analysis, and the ability to meet client deadlines. Responsibilities include leading incident responses, coordinating containment and recovery, documenting