Назад
Company hidden
6 дней назад

Principal Consultant (DFIR)

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Principal Consultant (DFIR) (Cybersecurity): Leading high-profile incident response engagements, investigating forensic evidence across endpoint, network, cloud, and operating-system environments with an accent on digital forensics, malware analysis, and customer crisis communication. Focus on coordinating responders, identifying threat activity through hypothesis-driven analysis, preserving evidence, and improving incident response services.

Location: Remote, United States

Company

hirify.global provides identity and access management, exposure management, risk, managed detection and response, and incident response services supported by its Meridian platform and AI-enabled operations.

What you will do

  • Lead responses to high-profile and sensitive customer security incidents.
  • Perform incident triage, determine scope and impact, identify vulnerabilities, and recommend remediation actions.
  • Manage the full incident response lifecycle, from preparation and detection through resolution, reporting, and lessons learned.
  • Collect, preserve, triage, and analyze forensic artifacts from client networks and devices.
  • Use EDR, log collection, endpoint, network, and SIEM platforms for large-scale investigations.
  • Communicate findings to customers and train, coach, and supervise junior and ad-hoc responders.

Requirements

  • At least 5 years of professional services or information security experience, including 3 or more years in incident response.
  • Industry-recognized digital forensics or incident response certification, such as GCIH, GCFA, GCFE, CFCE, GREM, EnCE, or CCE.
  • Experience coordinating incidents, leading response teams, and explaining complex technical topics to technical and non-technical audiences.
  • Experience investigating Windows, Linux, macOS, and cloud environments, with expertise in endpoint, memory, network forensics, or malware analysis.
  • Knowledge of the Incident Response Lifecycle, Cyber Kill Chain, MITRE ATT&CK, evidence preservation, indicators of compromise, and threat actor analysis.
  • Experience with forensic tools, Elasticsearch, data analytics platforms, endpoint and network technologies, SIEMs, Python, PowerShell, and project management.

Nice to have

  • Certifications such as CISSP, OSCP, ITIL, COBIT, or SABSA.
  • Working knowledge of NIST SP 800-61r2, ISO 27035, ISO 27001, and ISO 27002.

Culture & Benefits

  • Medical insurance covering employees and dependents, life insurance, and a retirement match program.
  • Paid time off, sick and casual leave, maternity and paternity leave, bereavement leave, and volunteer time.
  • Professional development reimbursement and access to a LinkedIn learning platform.
  • Mobile phone reimbursement.
  • Benefits mention a hybrid work model with 2–3 days in the office, while the role is listed as remote.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →