Sr. DFIR Consultant, Cyber Advisory & Training

Trustwave; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading provider of data security services, Trustwave is seeking a Sr. DFIR Consultant to enhance government partners' information security programs. This remote role involves developing training materials, conducting incident response investigations, and collaborating with a global team. Ideal candidates will have a strong background in digital forensics and incident response, along with teaching experience.

Qualifications

• Experience in incident response and digital forensics in Windows and mixed environments.
• Knowledge of security fundamentals in Linux and Windows related to web applications.
• Ability to maintain Public Trust or Secret Clearance.

Responsibilities

• Developing and updating training materials and teaching courses on Network Intrusion methodology.
• Performing tabletop exercises, policy reviews, and proactive services for clients.
• Conducting incident response investigations for government clients.

Skills

Incident response

Digital forensics

Teaching

Memory analysis

Malware identification

Education

High school diploma or equivalent

College degree

Security certifications (GCFA, CISSP, CMMC-RP)

Job description

Sr. DFIR Consultant, Cyber Advisory & Training

Trustwave Government Solutions is a leading provider of data security and compliance services to the U.S. Federal government. Our team of security experts, ethical hackers, and researchers enables our government partners to transform their information security and compliance programs, ensuring valuable outcomes at the best value. We adopt a collaborative, innovative approach to meet our clients' needs, combining industry best practices with customized technology to ensure quality and integrity.

We are seeking a Digital Forensics and Incident Response (DFIR) Consultant with training experience. Key responsibilities include:

1. Developing and updating training materials and teaching courses on Network Intrusion methodology and various forensics disciplines.
2. Performing tabletop exercises, policy reviews, and proactive services for clients.
3. Collaborating with a global team of incident responders, penetration testers, threat hunters, and researchers.
4. Conducting incident response investigations for government clients.

The ideal candidate should be proficient in multiple aspects of DFIR such as memory analysis, forensic timeline creation, hash analysis, and malware identification. Preference will be given to candidates with law enforcement experience and instructional background. The role is remote and open to US-based candidates. There is an opportunity to cross-train with penetration testing and threat hunting teams.

Qualifications

• Experience in incident response and digital forensics in Windows and mixed environments.
• Knowledge of security fundamentals in Linux and Windows related to web applications, middleware, databases, and identity management platforms.
• Experience in teaching or proctoring in classroom environments.
• Ability to maintain Public Trust or Secret Clearance.
• Willingness to travel up to 50%, with potential surges to 75%, supporting 2-3 week courses.

Education

• High school diploma or equivalent required; college degree is a plus.
• Security certifications such as GCFA, CISSP, CMMC-RP are desirable.

This remote position is open to individuals authorized to work in the U.S. Our flexible workplace philosophy allows for in-office or remote work, with occasional travel based on team needs. Trustwave is an Equal Opportunity Employer committed to diversity and inclusion. For accommodations due to disability, contact [e-mail].

Federal contracting requirements include US citizenship, passing and maintaining a NACLC, and obtaining necessary security clearances.