DFIR Consultant

Job not on LinkedIn

🕒 August 12

🇺🇸 United States – Remote

💵 $87.4k - $131k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tokio Marine HCC

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📦 Logistics

💼 Consulting

✈️ Travel

Logistics • Consulting • Travel

Tokio Marine HCC is a global specialty insurance and reinsurance group that underwrites more than 100 classes of specialty insurance across 180+ countries. The company offers a wide range of commercial products—including accident & health, aviation, casualty, cyber & tech, energy, marine, travel, crop, and transactional risk—serving brokers, enterprises, and program partners. With strong financial ratings (AM Best A++ / Fitch AA- / S&P A+) and a multi-billion dollar premium base, Tokio Marine HCC combines underwriting expertise, program management, and claims services as part of the Tokio Marine Group.

📋 Description

• Perform triage, acquisition, preservation, and analysis of endpoint, server, cloud, and log evidence to determine scope, impact, and root cause • Develop accurate timelines, identify affected assets and accounts, and document investigative findings clearly and defensibly • Support analysis of malware, suspicious scripts, persistence mechanisms, credential theft, lateral movement, and data theft activity • Use repeatable methods and validated workflows to maintain evidence integrity and investigation quality • Communicate with internal stakeholders, clients, insurers, legal counsel, and other approved parties during active matters • Prepare updates, investigation notes, and report content translating technical details into actionable business and response guidance • Support status calls, evidence requests, and coordination of next steps across involved teams • Contribute to playbooks, templates, evidence handling procedures, and knowledge articles • Identify investigative tasks that can be standardized, automated, or improved for scale • Support after-action reviews and lessons learned • Contribute to short-term and long-term plans for the designated organizational area • Write or significantly contribute to investigative reports and documentation • Develop innovative ways to improve financials and operational efficiency • Comply with corporate policies and procedures and help implement cost-effective controls

🎯 Requirements

• Minimum 4 Year / bachelor's degree in cyber security, Computer Science, Information Technology related degree • 2+ years of professional experience in digital forensics, incident response, security operations, or related investigative work • Experience performing endpoint, server, and cloud log analysis in support of cyber incidents • Experience with common DFIR tools, evidence handling, and report writing • Ability to manage multiple active matters while maintaining quality and deadlines • Excellent communication skills to clearly and concisely communicate complex technical concepts to stakeholders • Preferred advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus

🏖️ Benefits

• Competitive salary and employee benefit package • Strong learning culture • Growth perspectives • 6% 401K match • 20 days of PTO and 2 Floating Days • Paid parental leave • An opportunity to love what you do