DFIR Consultant - Remote (Anywhere in the U.S.)

Location: Remote, anywhere in the U.S.; up to 20% travel

Company

hirify.global provides cybersecurity expertise, solutions, and services to organizations including Fortune 500 companies and U.S. government agencies.

What you will do

• Perform DFIR investigations involving host forensics, network traffic analysis, malware handling and triage, log review, and BEC analysis.
• Support engagement communication, time management, coordination, and client guidance throughout investigations.
• Produce accurate deliverables covering technical findings, recommendations, business impact, and realistic remediation strategies for technical and managerial audiences.
• Collaborate across concurrent engagements and contribute to the evolving DFIR service portfolio.
• Use scripting and automation to improve investigative efficiency and continuously develop DFIR capabilities.
• Participate in on-call rotation and maintain availability outside standard business hours during high-severity incident surges.

Requirements

• High school diploma and 5 years of experience, or a bachelor’s degree and 2 years of experience, or a master’s degree.
• Hands-on experience with host forensics, network traffic analysis, malware handling or triage, log review, and BEC analysis.
• Strong written and verbal communication skills, including presenting technical findings to technical and managerial audiences.
• Creativity and adaptability for solving challenging problems in a rapidly changing environment.
• Willingness to embrace emerging technologies, including AI tools.
• Must be based in the U.S.; remote workforce is U.S.-based only.
• Ability to meet sedentary work requirements and perform extensive computer-based visual and wrist, hand, and finger activity for at least 8 hours per day.

Nice to have

• Consulting or professional services experience and familiarity with established DFIR methodologies and processes.
• Experience with EDR, NDR, XDR, SIEM, firewalls, NGAV, Velociraptor, and related solutions.
• Proficiency with PowerShell, Python, Bash, Go, or similar scripting languages.
• Experience with Amazon Web Services, Google Workspace, Microsoft 365, and Azure.
• Awareness of attacker techniques, advanced threat groups, and threat intelligence integration.
• Certifications such as GCFA, GCFE, GCIH, GCIA, GDAT, GREM, or CISSP.

Culture & Benefits

• Remote workforce with some travel and, for certain positions, possible on-site work.
• Collaborative environment with mentorship and guidance from knowledgeable security professionals.
• Medical, dental, and HSA options, including employer premium contributions.
• 12 corporate holidays, flexible time off, mobile phone and home internet allowance, and pet benefits.
• Retirement plan eligibility after two months at open enrollment.

Hiring process

• Applications are processed through Greenhouse Software.
• HR screen requests are scheduled through Zoom Scheduler; check the spam folder for missed communications.