Principal DFIR Consultant - Remote (Anywhere in the U.S.)

GuidePoint Security
United States
Workplace: RemoteFull timeFunction: CybersecurityExperience: 8+ yearsSkills: ["Communication","Mentorship","Client leadership","Ownership","Continuous improvement"]

Lead the DFIR Practice’s highest-level individual contributor on the most complex, high-severity cyber incidents. Oversee and QA investigations, step in as engagement lead for ransomware, APT, nation-state, and insider threat cases, and perform advanced host forensics, network analysis, malware triage, and cloud forensics. Own DFIR methodology development, mentor senior and analyst staff, support pre-sales scoping, and drive continuous improvement across the practice.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GuidePoint Security
GuidePoint Security
2 days ago

Principal DFIR Consultant - Remote (Anywhere in the U.S.)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live
Reposted: similar role first listed 4 months ago

Job Summary

Lead the DFIR Practice’s highest-level individual contributor on the most complex, high-severity cyber incidents. Oversee and QA investigations, step in as engagement lead for ransomware, APT, nation-state, and insider threat cases, and perform advanced host forensics, network analysis, malware triage, and cloud forensics. Own DFIR methodology development, mentor senior and analyst staff, support pre-sales scoping, and drive continuous improvement across the practice.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Serve as Oversight/QA on complex or high-severity engagements by reviewing findings, providing technical depth, and ensuring deliverable quality.
  • •Lead the most complex or sensitive investigations and set standards for client communication and investigative rigor.
  • •Conduct advanced investigations including host forensics, network analysis, malware reverse engineering/triage, cloud forensics, threat actor attribution, and intelligence-driven investigation.
  • •Own DFIR methodologies by designing, documenting, and maintaining investigation playbooks and SOPs, and improving tooling and automation.
  • •Mentor senior and analyst staff through guidance, internal training, technical writing, and support for hiring activities such as candidate screening.
Travel: Low travel

Pay and Benefits

Perks:Health InsuranceDentalPaid LeaveRetirementInternet Allowance

Key Requirements

  • •8+ years of hands-on DFIR experience, including complex incident response and forensic investigations.
  • •10+ combined years of IT and information security experience.
  • •Demonstrated lead or senior technical experience on high-severity engagements (ransomware, APT, nation-state, or insider threat).
  • •Expert proficiency across multiple DFIR disciplines, including host forensics, network forensics, log analysis, malware triage, cloud IR, and BEC investigation.
  • •Exceptional written and verbal communication skills for presenting complex findings to executive and legal audiences.
Experience:8+ yearsDFIRIncident responseForensicsThreat intelligence
Skills:CommunicationMentorshipClient leadershipOwnershipContinuous improvement
Certifications:GREMGCFAGCFEGDATGCIHGCIACISSP
Tech Stack:PowerShellPythonBashGoAI toolsEDRNDRXDRSIEMVelociraptorCloud forensicsAWSMicrosoft 365AzureGoogle Workspace

Company Brief

GuidePoint Security
Provides cybersecurity consulting, managed security services, incident response, cloud and network security, and compliance solutions to enterprises and government organizations, helping clients identify, mitigate, and respond to cyber threats across complex environments.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Herndon, United States
Founded: 2010
WebsiteLinkedIn