Sr. DFIR Consultant, Cyber Advisory & Training

Trustwave; United States; Remote; USD 100,000 - 125,000; Full time

Job summary

An established industry player is seeking a Digital Forensics and Incident Response Consultant to enhance their Cyber Advisory & Training team. This role involves developing training materials, conducting tabletop exercises, and performing incident response investigations for government clients. The ideal candidate will have a strong background in digital forensics, excellent teaching skills, and the ability to work collaboratively with a global team. This is a remote position that offers flexibility while also requiring occasional travel. Join a dynamic team committed to making a difference in cybersecurity for government agencies.

Qualifications

• Experience in incident response and digital forensics in Windows and mixed environments.
• Knowledge of security basics in Linux and Windows environments.

Responsibilities

• Update and develop training materials for Network Intrusion methodology.
• Conduct Incident Response investigations for government clients.

Skills

Incident Response

Digital Forensics

Memory Analysis

Forensic Timelining

Hash Analysis

Malware Identification

Teaching Skills

Education

High School Diploma

College or University Degree

Security Certifications (e.g., GCFA, CISSP)

Job description

Sr. DFIR Consultant, Cyber Advisory & Training

United States

Job Description

Posted Sunday, April 6, 2025 at 11:00 PM

About Trustwave Government Solutions

Trustwave Government Solutions is a leading provider of data security and compliance services to the U.S. Federal government. Our team of security experts, ethical hackers and researchers, enables our government partners to transform the way they manage their information security and compliance programs results to ensure each customer receives valuable outcomes at the best value. The agencies we work with benefit from our collaborative, innovative approach to meeting their unique needs. We listen carefully and respond nimbly. Our solutions combine industry best practices with customized technology to ensure quality and integrity.

We are looking for a Digital Forensics and Incident Response (DFIR) Consultant with training experience. Specific Responsibilities:

• Updating and assisting with the development of training materials and teaching courses on Network Intrusion methodology and multiple forensics disciplines.
• Perform tabletop exercises, policy reviews and other proactive services for our clients.
• Being part of a global team of incident responders, penetration testers, threat hunters and researchers, sharing knowledge and methodologies.
• Conducting Incident Response investigations for a variety of government clients.

Candidates should be versed in multiple aspects of DFIR such as memory analysis, forensic timelining, hash analysis, and malware identification. The ideal candidate will be a current or former law enforcement officer and have experience instructing. Consultants must be able to effectively balance workload and work effectively and closely with colleagues within the ever-growing team worldwide. This position is open to remote US-based candidates.

Qualifications:

• Defined professional experience performing incident response and digital forensics in Windows and mixed environments.
• Knowledge of security basics in both Linux and Windows environments as it pertains to web application, middleware, database, and identity management platforms.
• Experience teaching or actively proctoring in a classroom environment.
• Ability to maintain Public Trust or Secret Clearance.
• Willing to travel 50 percent with potential to surge to 75 percent to support the mission. (In support of 2 and 3 week courses, not every month)

Education:

• A high school diploma or equivalent is required; a college or university degree is a plus.
• Security specific certifications such as GCFA, CISSP, CMMC-RP and others are desirable.

This is a remote opportunity open to anyone legally authorized to work in the United States. Guided by our flexible workplace philosophy, Moments That Matter, people gather in the office when in-person interaction is most impactful; full-time remote employees may be asked to travel occasionally based on the needs of the team and the business.

Trustwave is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable laws.

Trustwave is also committed to providing reasonable accommodations to qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact our Human Resources department at [e-mail].

Per Federal government contracting requirements, candidate must (1) be a US citizen, (2) pass and maintain a National Agency Check with Local Agency and Credit Checks (NACLC), and (3) obtain all required security clearance(s).