Senior DFIR Consultant - Remote Incident Response Lead

Forensic Focus; Miami, Northern (FL, KY); Hybrid; USD 123,000 - 179,000; Full time

Job summary

Forensic Focus in Miami/Remote is seeking a Senior DFIR Consultant to lead incident response engagements, perform memory and disk acquisitions, IOC triage, and timeline construction for insurance, legal, and enterprise clients.

You will guide delivery teams, present findings to clients under pressure, and ensure chain-of-custody compliance. Requires 3–5+ years in DFIR, GCFA/GCFR preferred, and experience with CrowdStrike Falcon, SIEM/SOAR, and scripting.

Qualifications

• 3–5+ years in DFIR or related cybersecurity roles.
• Advanced forensic investigation capability required.
• GCFA or GCFR certification strongly preferred.

Responsibilities

• Perform forensic disk and memory acquisition.
• IOC triage, log review, event correlation, and timeline construction.
• Lead small delivery teams and coordinate client engagements.
• Present findings to clients under pressure and ensure chain-of-custody compliance.

Skills

DFIR experience

Forensic investigation

Client communication

Delivery leadership

Education

GCFA/GCFR certification

Tools

CrowdStrike Falcon

SIEM/SOAR

Python

PowerShell

Job description

Forensic Focus in Miami/Remote is seeking a Senior DFIR Consultant to lead incident response engagements, perform memory and disk acquisitions, IOC triage, and timeline construction for insurance, legal, and enterprise clients.

You will guide delivery teams, present findings to clients under pressure, and ensure chain-of-custody compliance. Requires 3–5+ years in DFIR, GCFA/GCFR preferred, and experience with CrowdStrike Falcon, SIEM/SOAR, and scripting.