Principal Consultant, DFIR, Reactive Services (Unit 42) - Remote

Overview

The Principal Consultant will lead incident response engagements, providing guidance on remediation while managing client relationships.

In Short

• Lead client-facing incident response engagements.
• Perform host-based analysis on Windows, Linux, and Mac OS X systems.
• Examine various log sources for evidence of malicious activity.
• Investigate data breaches using forensic tools.
• Guide clients through forensic investigations and remediation.
• Mentor team members in incident response best practices.
• Manage incident response scoping and client interfacing.
• Travel as needed, averaging 20% of the time.
• Contribute to the practice through public speaking and publications.
• Collaborate across functions, including sales.

Requirements

• 6+ years of incident response or digital forensics experience.
• Strong leadership skills and experience managing teams.
• Proficiency in host-based forensics and data breach response.
• Experience with forensic tools like EnCase and Splunk.
• Bachelor’s Degree in a related field.
• Ability to travel as needed.

Benefits

• Flexible wellbeing spending account.
• Mental and financial health resources.
• Personalized learning opportunities.
• Diverse team environment.
• Opportunities for public speaking and professional growth.