Senior Digital Forensics and Incident Response (DFIR) Consultant

Forensic Focus; Miami, Northern (FL, KY); Hybrid; USD 123,000 - 179,000; Full time

Job summary

Forensic Focus in Miami/Remote is seeking a Senior DFIR Consultant to lead incident response engagements, perform memory and disk acquisitions, IOC triage, and timeline construction for insurance, legal, and enterprise clients.

You will guide delivery teams, present findings to clients under pressure, and ensure chain-of-custody compliance. Requires 3–5+ years in DFIR, GCFA/GCFR preferred, and experience with CrowdStrike Falcon, SIEM/SOAR, and scripting.

Qualifications

• 3–5+ years in DFIR or related cybersecurity roles.
• Advanced forensic investigation capability required.
• GCFA or GCFR certification strongly preferred.

Responsibilities

• Perform forensic disk and memory acquisition.
• IOC triage, log review, event correlation, and timeline construction.
• Lead small delivery teams and coordinate client engagements.
• Present findings to clients under pressure and ensure chain-of-custody compliance.

Skills

DFIR experience

Forensic investigation

Client communication

Delivery leadership

Education

GCFA/GCFR certification

Tools

CrowdStrike Falcon

SIEM/SOAR

Python

PowerShell

Job description

# Senior Digital Forensics and Incident Response (DFIR) Consultant*CYPFER***Miami, FL**Remote · Senior · Full-time### The RoleThis senior-level consulting position sits at the intersection of hands-on technical execution and workstream leadership. Day to day, the role involves forensic disk and memory acquisition, IOC triage, log review, event correlation, and timeline construction across active incident response and post-breach recovery engagements for insurance, legal, and enterprise clients.### Skills & ExperienceCandidates need 3–5+ years in DFIR or related cybersecurity roles, with advanced forensic investigation capability. GCFA or GCFR certification is strongly preferred. Practical experience with EDR platforms such as CrowdStrike Falcon, SIEM/SOAR tools, Python and/or PowerShell scripting, and chain-of-custody compliance is required.### Who It SuitsThis role suits an experienced DFIR practitioner ready to step into a delivery leadership capacity — someone comfortable presenting findings to clients under pressure, coordinating small teams, and deploying to client sites at short notice. Strong communicators with a forensic technical foundation will thrive here.Typical advertised salary forIncident Response roles in United States:**$123,000–$179,000**(median $149,000 — from159 recent listings analysed by Forensic Focus).Compare Incident Response salaries in United States →Certifications mentioned:GCFA · GCFR — find training for these on theDFIR Training Finder.Learn More/Apply