Назад
Company hidden
2 дня назад

Cyber Consultant, DFIR

90 000 - 125 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Consultant, DFIR (Cybersecurity): Investigating and responding to cybersecurity incidents across servers, workstations, networks, and cloud platforms with an accent on digital forensics, evidence preservation, and client-facing incident coordination. Focus on leading containment and recovery, analyzing root cause and impact, and building clear incident narratives for non-technical stakeholders.

Location: Hybrid, with a strong preference for candidates able to work from the Washington, DC, New York, or Chicago offices. Candidates must be legally authorized to work in the United States. The role includes occasional travel, work outside standard business hours, evenings and weekends, and participation in an on-call schedule.

Salary: $90,000–$125,000 per year.

Company

hirify.global is a managed security services provider delivering strategic advisory, managed security, offensive security, threat intelligence, and incident response services using AI-powered security operations and human expertise.

What you will do

  • Lead and coordinate client-facing responses to cybersecurity incidents, including identification, containment, eradication, and recovery.
  • Investigate security breaches and conduct digital forensic investigations across servers, end-user workstations, network systems, SaaS platforms, logs, and relevant artifacts.
  • Collect, preserve, and analyze digital evidence in accordance with legal and regulatory requirements.
  • Prepare detailed incident reports that explain findings and the incident narrative for non-technical audiences, while maintaining complete investigation documentation.
  • Coordinate with DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, and other internal service teams.
  • Serve as the primary client contact, working with IT, legal, compliance, and external vendors to provide updates and maintain incident response alignment.

Requirements

  • Proven experience in digital forensics and incident response.
  • Strong knowledge of digital forensics tools and techniques, including X-Ways or similar forensic tooling.
  • Experience with incident response frameworks and methodologies such as NIST, SANS, or similar.
  • Excellent analytical, problem-solving, written communication, and verbal communication skills.
  • Strong understanding of network protocols, operating systems, and security technologies.
  • Experience and interest in interfacing with clients or customers.
  • Ability to work independently and manage multiple projects simultaneously.
  • High school diploma or equivalent is required.
  • Ability to support occasional travel, work outside standard business hours as required, and participate in an on-call schedule.

Nice to have

  • Bachelor’s or Master’s degree in Digital Forensics, Computer Science-focused studies, or a closely related field; a college or university degree is a plus.
  • Industry-recognized DFIR certifications.
  • Knowledge of scripting languages such as Python or PowerShell for automation and analysis.
  • Knowledge of database formats for investigative and knowledge purposes.
  • Knowledge of Azure, AWS, Oracle, and/or GWP cloud platforms.

Culture & Benefits

  • Culture focused on innovation, creativity, respect, inclusion, and equal opportunity.
  • Medical, dental, and vision insurance.
  • 401(k) with employer matching, paid time off, and holidays.
  • Flexible spending accounts, health savings accounts, and employee assistance programs.
  • Training and development opportunities and an adoption assistance program.
  • Flexible work arrangements with in-person collaboration for key moments based on role, team, and business needs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →