Senior Digital Forensics and Incident Response Consultant

🔥 38 minutes ago

🇮🇪 Ireland – Remote

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

CYPFER

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📦 Logistics

🔒 Cybersecurity

Consulting • Logistics • Cybersecurity

CYPFER is a global leader in cyber-attack incident response and ransomware post-breach recovery. The company provides a comprehensive range of cybersecurity services, including incident response, ransomware recovery, digital forensics, and cyber risk management. It offers services such as business email compromise resolution, cloud and web application investigations, dark web monitoring, and advisory. CYPFER is known for its rapid deployment of in-house specialists, providing 24/7 global support to ensure businesses stay secure and resilient against cyber threats. With a focus on integrating seamlessly with clients' operations, CYPFER is dedicated to offering unmatched care and commitment to cybersecurity.

📋 Description

• Lead small workstreams within active incident response and recovery engagements • Coordinate Consultants and ensure deliverable quality and alignment with client objectives • Plan workstreams, conduct stand-ups, and track risks across active engagements • Validate technical outputs and present interim findings to client stakeholders • Manage client expectations and lead creation of client-ready deliverables • Deliver forensic acquisition, IOC triage, and recovery work packages • Maintain accurate case notes and produce client-ready artefacts • Follow SOPs, QA standards, chain-of-custody, and compliance requirements • Analyze triage collections and artefacts for indicators of compromise and malicious activity • Review host-system and appliance logs for suspicious activity • Collect forensic disk and memory images from physical and virtual endpoints and servers • Drive event correlation and timeline construction • Conduct independent threat research based on investigation IOCs • Direct junior team members in targeted research tasks • Escalate risks early and operate under the direction of a Manager or Senior Manager • Participate in a rotating on-call schedule

🎯 Requirements

• 3–5+ years of experience in incident response, digital forensics, or a related cybersecurity role • Advanced capability in DFIR analysis, including deeper forensic investigation and leading technical analysis workstreams • GCFA or GCFR certification strongly preferred • Ability to coordinate plans, tasks, and risks across an engagement workstream with multiple contributors • Experience presenting interim findings to client stakeholders, managing expectations, and leading client-ready deliverables • Basic scripting proficiency in Python and/or PowerShell • Working knowledge of endpoint forensics, including evidence acquisition, preservation, and artifact triage across physical and virtual systems • Hands-on experience operating EDR platforms such as CrowdStrike Falcon for threat hunting, host isolation, and telemetry collection • Familiarity with SIEM, SOAR, or IR orchestration platforms • Ability to perform estimation and short-cycle planning within an engagement workstream • Strong customer service and consulting skills • Ability to adhere to client and internal policies, procedures, and security practices • Ability to remain calm, composed, and articulate in high-pressure client situations • Excellent relationship management and communication skills • High level of confidentiality when handling sensitive client and incident data • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent hands-on experience • Industry certifications such as GCFA, GCFR, GCIH, CCFR, CCHF, AWS Certified, or similar are a strong asset • Exposure to threat hunting, network forensics, or malware analysis methodologies • Experience in a professional services or consulting environment • Ability to work weekends and outside normal business hours as needed • Ability to travel on short notice to client sites, including within 24–48 hours' notice

🏖️ Benefits

• Remote work arrangement • Travel flexibility and deployments typically 1–2 weeks in duration • Exposure to insurance, legal, and enterprise client engagements • Rotating on-call schedule

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume