Senior DFIR Consultant - Remote (Anywhere in the U.S.)

The role

The Senior DFIR Consultant leads and executes complex investigations including host forensics, network traffic analysis, and malware triage. This role involves delivering technical analysis and remediation strategies to clients across various sectors.

What you will do

• Lead and perform DFIR investigations including host forensics, network traffic analysis, malware handling, log review, and BEC analysis
• Drive engagement communication, time management, and coordination
• Author technical and managerial deliverables detailing findings and remediation strategies
• Perform advanced mission-critical assessments
• Collaborate with peers on concurrent engagements
• Utilize automation, orchestration, and scripting to improve efficiency
• Contribute to the integration of open-source and commercial tools
• Foster client relationships as a technical voice
• Maintain availability outside standard business hours during high-severity incident surges
• Participate in on-call rotation

Required qualifications

• 7 years of experience
• Four plus years of hands-on experience performing incident response investigations
• Six plus combined years of IT and information security experience
• Proficiency in host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis
• Strong written and verbal communication skills
• Creativity and adaptability to solve complex problems
• Ability to embrace emerging technologies including AI tools
• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Nice to have

• Prior experience in a consulting or professional services role
• Experience with established DFIR methodology and process
• Experience with EDR, NDR, XDR, SIEM, FW, NGAV, Velociraptor, and others
• Proficiency with PowerShell, Python, Bash, Go, or similar
• Experience with Amazon Web Services, Google Workspace, Microsoft 365, and Azure
• Awareness of attacker techniques, advanced threat groups, and threat intelligence integration
• Relevant industry certifications such as GCFA, GCFE, GCIH, GCIA, GDAT, GREM, or CISSP

Benefits

• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. The company has over 1,300 employees and serves more than 6,200 customers.