GuidePoint Security

2 months ago

Principal DFIR Consultant - Remote (Anywhere in the U.S.)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Principal DFIR Consultant leads high-severity investigations, mentors junior staff, and shapes the practice through methodologies, client leadership, and business development. The role requires advanced host and network forensics, cloud IR, threat attribution, and hands-on incident response across complex engagements, with heavy emphasis on communication to executives and legal audiences and shaping processes for the DFIR practice.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Consulting & Advisory

Seniority: Sr. Manager level

Key Responsibilities

•Oversight & QA: Serve in the Oversight role on complex or high-severity engagements, reviewing findings before client calls, providing technical depth, anticipating client questions, and ensuring quality of analysis and deliverables.
•Lead on Critical Engagements: Step in as engagement Lead on the most complex or sensitive investigations (ransomware, APT, nation-state, insider threat), setting the standard for client communication and investigative rigor.
•Advanced Technical Execution: Conduct advanced host forensics, network analysis, malware reverse engineering/triage, cloud forensics, threat actor attribution, and intelligence-driven investigation.
•Surge Capacity: Serve as a trusted surge resource for the team during high-volume periods, providing senior-level coverage across concurrent engagements.
•Methodology Ownership: Design, document, and maintain DFIR investigation methodologies, playbooks, and SOPs that raise the quality floor for the entire practice.

Pay and Benefits

Perks:Remote WorkHealth InsuranceDentalRetirementPet Benefit

Key Requirements

•8+ years of hands-on DFIR experience, including complex incident response and forensic investigations.
•10+ combined years of IT and information security experience.
•Demonstrated experience in a Lead or senior technical role on high-severity engagements (ransomware, APT, nation-state, or insider threat).
•Expert-level proficiency across multiple DFIR disciplines: host forensics, network forensics, log analysis, malware triage, cloud IR, and BEC investigation.
•Exceptional written and verbal communication skills; ability to present complex technical findings to executive and legal audiences.

Experience:8+ yearsDfirIncident responseForensicsCybersecurity

Skills:LeadershipMentorshipCommunicationClient managementPre-sales

Certifications:GREMGCFAGCFEGDATGCIHGCIACISSP

Languages:English

Tech Stack:PowerShellPythonBashGoEDRNDRXDRSIEMVelociraptor

Company Brief

GuidePoint Security

Provides cybersecurity consulting, managed security services, incident response, cloud and network security, and compliance solutions to enterprises and government organizations, helping clients identify, mitigate, and respond to cyber threats across complex environments.

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Herndon, United States

Founded: 2010

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GuidePoint Security

2 months ago

Principal DFIR Consultant - Remote (Anywhere in the U.S.)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Consulting & Advisory

Seniority: Sr. Manager level

Key Responsibilities

•Oversight & QA: Serve in the Oversight role on complex or high-severity engagements, reviewing findings before client calls, providing technical depth, anticipating client questions, and ensuring quality of analysis and deliverables.
•Lead on Critical Engagements: Step in as engagement Lead on the most complex or sensitive investigations (ransomware, APT, nation-state, insider threat), setting the standard for client communication and investigative rigor.
•Advanced Technical Execution: Conduct advanced host forensics, network analysis, malware reverse engineering/triage, cloud forensics, threat actor attribution, and intelligence-driven investigation.
•Surge Capacity: Serve as a trusted surge resource for the team during high-volume periods, providing senior-level coverage across concurrent engagements.
•Methodology Ownership: Design, document, and maintain DFIR investigation methodologies, playbooks, and SOPs that raise the quality floor for the entire practice.

Pay and Benefits

Perks:Remote WorkHealth InsuranceDentalRetirementPet Benefit

Key Requirements

•8+ years of hands-on DFIR experience, including complex incident response and forensic investigations.
•10+ combined years of IT and information security experience.
•Demonstrated experience in a Lead or senior technical role on high-severity engagements (ransomware, APT, nation-state, or insider threat).
•Expert-level proficiency across multiple DFIR disciplines: host forensics, network forensics, log analysis, malware triage, cloud IR, and BEC investigation.
•Exceptional written and verbal communication skills; ability to present complex technical findings to executive and legal audiences.

Experience:8+ yearsDfirIncident responseForensicsCybersecurity

Skills:LeadershipMentorshipCommunicationClient managementPre-sales

Certifications:GREMGCFAGCFEGDATGCIHGCIACISSP

Languages:English

Tech Stack:PowerShellPythonBashGoEDRNDRXDRSIEMVelociraptor

Company Brief

GuidePoint Security

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Herndon, United States

Founded: 2010

Website LinkedIn