DFIR Consultant - Remote (Anywhere in the U.S.)

The role

The DFIR Consultant performs investigations including host forensics, network traffic analysis, malware handling, log review, and BEC analysis. This person works under the guidance of Senior and Principal Consultants to produce technical findings and remediation strategies for clients.

What you will do

• Perform DFIR investigations including host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
• Support engagement communication, time management, and coordination.
• Produce technical findings, recommendations, business impact, and remediation strategies.
• Collaborate with peers and engagement leads across concurrent engagements.
• Use scripting and automation to improve efficiency of DFIR tasks.
• Strengthen skills across core DFIR disciplines.
• Support client relationships by providing information and guidance.
• Contribute to the service portfolio.
• Maintain availability outside standard business hours during high-severity incident surges.
• Participate in on-call rotation.

Required qualifications

• High School diploma and 5 years of experience, OR Bachelor’s degree and 2 years of experience, OR Master’s degree.
• Hands-on experience across core DFIR disciplines: host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
• Strong written and verbal communication skills.
• Creativity and adaptability to solve challenging problems.
• Embraces emerging technologies, including AI tools.
• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Nice to have

• Prior experience in a consulting or professional services role.
• Experience with established DFIR methodology and process.
• Experience with EDR, NDR, XDR, SIEM, FW, NGAV, Velociraptor, and others.
• Proficiency with PowerShell, Python, Bash, Go, or similar.
• Experience with Amazon Web Services, Google Workspace, Microsoft 365, and Azure.
• Awareness of attacker techniques, advanced threat groups, and integration of threat intelligence into an investigation.
• Relevant industry certifications such as GCFA, GCFE, GCIH, GCIA, GDAT, GREM, or CISSP.

Benefits

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance.
• 12 corporate holidays.
• Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. The company has over 1,300 employees and serves more than 6,200 customers.