Sr. Consultant, DFIR

Forensic Focus; United States; Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

Forensic Focus seeks a skilled incident response consultant to lead investigations from breach identification through containment and reporting. You will analyze logs, collect evidence, and investigate across servers, workstations, networks, and SaaS platforms while communicating findings clearly to diverse audiences.

You will work directly with clients, manage multiple engagements, and travel occasionally while staying on-call to respond to incidents as needed.

Qualifications

• Proven DFIR experience in incident response.
• Experience with forensic tooling and incident handling.

Responsabilités

• Lead end-to-end incident response engagements for clients.
• Perform evidence collection and log analysis.
• Liaise with clients and produce clear incident reports for technical and non-technical audiences.

Connaissances

DFIR experience

X-Ways

NIST framework

SANS training

Python scripting

PowerShell scripting

Outils

X-Ways DFIR

Description du poste

The Role

This consultant leads incident response engagements end to end, from identifying and containing breaches to conducting forensic investigations across servers, workstations, networks and SaaS platforms. Responsibilities include evidence collection, log analysis, client liaison and producing clear, narrative incident reports for technical and non-technical audiences.

Skills & Experience

Candidates need proven DFIR experience, familiarity with forensic tools such as X-Ways, and knowledge of incident response frameworks like NIST or SANS. Strong understanding of networking, operating systems and security technologies is required, alongside scripting skills in Python or PowerShell and relevant DFIR certifications.

Who It Suits

Ideal for an experienced forensic investigator comfortable working directly with clients under deadline pressure, who can communicate complex technical findings clearly and manage multiple engagements independently, including occasional travel and on-call responsibilities.