Senior DFIR Incident Response Lead - Client-Facing

Forensic Focus; United States; Hybrid; USD 123,000 - 179,000; Full time

Job summary

Forensic Focus in the United States seeks a Lead Principal Consultant DFIR to lead end-to-end incident response engagements, from identification and containment through forensic examination and recovery, serving as the primary client contact and delivery lead. You will collect evidence, analyze artifacts, review logs, and produce narrative incident reports for diverse audiences.

This role requires strong DFIR expertise, X-Ways proficiency, familiarity with NIST/SANS frameworks, and excellent

Qualifications

• Proven DFIR experience with incident response engagements.
• Familiarity with NIST and SANS frameworks.
• Scripting skills in Python or PowerShell are advantageous.

Responsibilities

• Lead end-to-end incident response engagements from identification to recovery.
• Act as primary client point of contact and delivery lead.
• Collect evidence, analyze artifacts, review logs, and write narrative reports.
• Travel as needed for client engagements.

Skills

DFIR experience

Scripting (Python/PowerShell)

Strong written communication

Education

Digital forensics / incident response certifications

Tools

X-Ways

Job description

Forensic Focus in the United States seeks a Lead Principal Consultant DFIR to lead end-to-end incident response engagements, from identification and containment through forensic examination and recovery, serving as the primary client contact and delivery lead. You will collect evidence, analyze artifacts, review logs, and produce narrative incident reports for diverse audiences.

This role requires strong DFIR expertise, X-Ways proficiency, familiarity with NIST/SANS frameworks, and excellent