Lead Principal Consultant DFIR – Spiderlabs
Job in
Northern, Floyd County, Kentucky, USA
Listed on 2026-10-04
Listing for:
Forensic Focus
Full Time
position Listed on 2026-10-04
Job specializations:
-
IT/Tech
Cybersecurity, IT Consultant, Information Security & Data Protection
Job Description & How to Apply Below
* Level Blue
* ** United States
** Lead/Principal
· Full-time###
The Role The consultant leads end-to-end incident response engagements — from initial identification and containment through forensic examination and recovery — acting as the primary client point of contact. Day-to-day work spans evidence collection, artifact analysis, log review, and authoring narrative-driven incident reports for diverse audiences.### Skills & Experience Candidates should bring proven DFIR experience, proficiency with forensic tooling such as X-Ways, and familiarity with frameworks including NIST and SANS.
Scripting skills in Python or Power Shell are advantageous, as are industry certifications in digital forensics or incident response and strong written communication abilities.### Who It Suits This role suits an experienced DFIR professional comfortable operating independently on complex, time-sensitive engagements and working directly with client legal, IT, and compliance teams. Those who thrive in a consulting environment with varied casework, on-call responsibilities, and occasional travel will find it a strong fit.
Typical advertised salary for Incident Response roles in United States:**$123,000–$179,000**(median $149,000 — from
159 recent listings analysed by Forensic Focus).Compare Incident Response salaries in United States →Certifications mentioned:
SANS — find training for these on theDFIR Training Finder.
Learn More/Apply
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×