Senior DFIR Consultant - Incident Response Lead

Socket.dev; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

401(k) with employer matching

Paid time off

Flexible spending accounts

Employee assistance programs

Training and development opportunities

Adoption assistance program

Job summary

LevelBlue is seeking a skilled Digital Forensics and Incident Response Specialist to join our global DFIR team in the United States. You will investigate incidents, conduct forensic analyses, and serve as the primary client contact across engagements.

This role requires deep technical expertise, strong analytical abilities, and effective communication to meet client timelines. Responsibilities include leading incident responses, documenting findings, and collaborating with cross-functional teams

Qualifications

• Proven experience in digital forensics and incident response.
• Experience with forensic tooling and incident response frameworks (e.g., NIST, SANS).
• Strong analytical, problem-solving, and communication skills.
• Ability to work with clients and cross-functional teams independently.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents for clients, from containment to recovery.
• Analyse breaches to determine root cause and impact; preserve and present evidence.
• Prepare incident reports and craft a narrative accessible to non-technical stakeholders.
• Collaborate with DFIR, Advisory, Threat Intelligence, and client teams; guide clients through investigations.

Skills

DFIR experience

Incident response

Analytical thinking

Client-facing communication

Education

Bachelor's or Master’s in Digital Forensics or Computer Science

Tools

X-Ways Forensics

SIFT Workstation

SIEM tooling

Job description

LevelBlue is seeking a skilled Digital Forensics and Incident Response Specialist to join our global DFIR team in the United States. You will investigate incidents, conduct forensic analyses, and serve as the primary client contact across engagements.

This role requires deep technical expertise, strong analytical abilities, and effective communication to meet client timelines. Responsibilities include leading incident responses, documenting findings, and collaborating with cross-functional teams