Digital Forensics & Incident Response (DFIR) Consultant

About the role

CYPFER is a leading first‑responder cybersecurity organization helping clients quickly return to business after a cyber‑attack. As a global market leader in ransomware post‑breach remediation and cyber‑attack first response, we work with major insurance carriers, law firms, and Fortune 1000 companies.

Key responsibilities

• Engage on behalf of CYPFER in incident response tasks, coordinating with insurance partners, legal counsel, client executives, and technical teams.
• Collect forensic artifacts and images from affected systems using standard tools and methodologies.
• Perform Windows forensics, triage, and analysis of indicators of compromise (IOCs).
• Review logs from hosts and appliances, build timelines, and apply mitigation strategies to remediate threats.
• Correlate events, maintain knowledge of emerging threats, and produce high‑quality deliverables with minimal supervision.

Required profile

• 2+ years of experience in digital forensics, incident response, or a similar role.
• Strong knowledge of Windows and Unix/Linux operating systems and EDR/EPP technologies.
• Familiarity with forensic acquisition and analysis of physical and virtual systems, including storage technologies such as RAID, NAS, SAN, Fiber Channel, iSCSI, and NFS.
• Ability to analyze and interpret logs, conduct threat research, and investigate business email compromise cases.

Required skills

• Windows forensics
• Unix/Linux forensics
• EDR/EPP technologies
• Forensic acquisition of physical and virtual systems
• RAID, NAS, SAN, Fiber Channel, iSCSI, NFS
• Log analysis and timeline creation
• Malware analysis tools
• SIEM and SOAR solutions
• E‑discovery tools
• Mobile device data collection
• Industry certifications (e.g., MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE)

What we offer

• Base salary with medical benefits and multiple bonus opportunities.
• Equal opportunity employment with accommodations available during the interview process.