Senior Incident Response Lead & Digital Forensics Expert

Forensic Focus; Georgia; On-site; USD 150,000 - 210,000; Full time

Job summary

Forensic Focus is seeking an experienced incident response consultant to lead client engagements through high-profile breaches. The role covers host and network forensics, log analysis, malware triage, and building investigative tooling to detect attacker tactics and indicators of compromise across cloud and on‑prem environments.

The ideal candidate has five years of DFIR experience spanning network, cloud, disk, and memory forensics, with preferred GCFA/GCFE/GCIH certifications and demonstrated

Qualifications

• Five years of incident response and forensic investigation experience across network, cloud, disk and memory forensics.
• GCFA, GCFE, GCIH certifications preferred.
• CTF experience and strong client communication skills.
• Prior engagement leadership or mentoring responsibilities.

Responsibilities

• Lead incident response engagements for clients during breaches.
• Conduct host and network forensics, log analysis, and malware triage.
• Develop tooling to detect attacker techniques and indicators of compromise across cloud and on‑prem environments.

Skills

Incident response

Forensic investigation

Network forensics

Cloud forensics

Memory forensics

Client communication

Leadership

Mentoring

Education

GCFA/GCFE/GCIH certifications

Job description

Forensic Focus is seeking an experienced incident response consultant to lead client engagements through high-profile breaches. The role covers host and network forensics, log analysis, malware triage, and building investigative tooling to detect attacker tactics and indicators of compromise across cloud and on‑prem environments.

The ideal candidate has five years of DFIR experience spanning network, cloud, disk, and memory forensics, with preferred GCFA/GCFE/GCIH certifications and demonstrated