DFIR Consultant​/Senior DFIR Consultant - Remote; U.S

DFIR Consultant / Senior DFIR Consultant – Remote (Anywhere in the U.S.)

GuidePoint Security’s Digital Forensics & Incident Response Practice (DFIR) provides comprehensive incident response services across various sectors. Key practice areas include:

• Reactive Incident Response Investigations
• Forensic Investigations
• Proactive Threat Discovery & Threat Hunting
• Purple Team Exercises (Blue Team in collaboration with GuidePoint Red Team)

• Operate as a technical resource and participate in DFIR investigations.
• Communicate effectively, manage time, and collaborate with peers.
• Author comprehensive engagement deliverables tailored to technical and managerial audiences, detailing findings, recommendations, and remediation strategies.
• Foster client relationships through support and guidance.
• Utilize automation, orchestration, and scripting to reduce manual processes and enable new capabilities.
• Contribute to integration of open‑source and commercial tools to improve DFIR processes and procedures.
• Perpetually strengthen relevant skills and knowledge to stay at the forefront of the information security industry.
• Maintain a strong desire to learn, adapt, and improve within a rapidly‑growing company.
• Perform other duties as assigned.

• Two (2+) years of experience performing incident response investigations (DFIR Consultant).
• Four (4+) combined years of IT and information security experience.
• Four (4+) years of experience performing incident response investigations (Senior DFIR Consultant).
• Six (6+) combined years of IT and information security experience.

• Prior experience in a Consulting Services role.
• Experience with DFIR methodology and process.
• Core capabilities: network traffic analysis, host forensics, malware handling/triage, log review, BEC analysis.
• Experience with industry‑related solutions including EDR, NDR, XDR, SIEM, firewall, NGAV, Velociraptor, and others.
• Experience with common programming languages:
  Power Shell, Python, BASH, Go, or others.
• Experience with cloud technologies: AWS, G Suite, M365, Azure.
• Awareness of attacker techniques, advanced threat groups, and integration of intelligence into an investigation.
• Relevant certifications: CISSP, GCIA, GCIH, GDAT, GCFE, GFCA, etc.

• Remote workforce (U.S. based).
• Group medical and dental insurance with heavy employer contributions.
• 12 corporate holidays and Flexible Time Off program.
• Health mobile phone and home internet allowance.
• Pet benefit option.
• Eligibility for retirement plan after 2 months.
• Other perks as described.