[Remote] Sr. Cyber Consultant, DFIR - SpiderLabs

Note: The job is a remote job and is open to candidates in USA. LevelBlue is seeking a Digital Forensics and Incident Response specialist for its Global DFIR team. The role investigates and responds to cybersecurity incidents, conducts forensic investigations, serves as a primary client contact, and prepares incident reports.

Responsibilities

• Be able to lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery in a client-facing capacity
• Analyse and investigate security breaches to determine the root cause and impact
• Conduct digital forensic science-based incident response investigations on a variety of digital devices, including servers and end user workstations, network systems, SaaS platforms that contain artifacts, logging, and data of investigative relevance
• Collect, preserve, and analyse digital evidence in accordance with legal and regulatory requirements
• Be able to prepare detailed incident reports, including findings and properly authoring a story that does not just restate factual dates/times, but articulates a story of the incident for a non-technical audience
• Maintain accurate and thorough documentation of all incident response activities and forensic investigations
• Internally, work closely with cross-functional teams inclusive of DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, etc., LevelBlue services
• Externally, work closely with Client teams including IT, legal, compliance, and external vendors, to support expert delivery during engagements. Team members in this role will serve as primary point of contact to guide clients through the forensic investigation and incident containment
• Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes

Skills

• Proven experience in DFIR
• Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling
• Experience with incident response frameworks and methodologies, such as NIST, SANS, or similar
• Excellent analytical and problem-solving skills
• Strong understanding of network protocols, operating systems, and security technologies
• Excellent written and verbal communication skills
• Experience and interest in interfacing with clients or customers
• Ability to work independently and manage multiple projects simultaneously
• A high school diploma or equivalent is required
• This role is open to candidates legally authorized to work in the United States
• Bachelor's or Master's degree in Digital Forensics, Computer Science-focused or closely related field of study and expertise
• DFIR industry accepted certifications
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation and analysis
• Knowledge of database formats for investigative and knowledge purposes
• Knowledge of Azure, AWS, Oracle, and/or GWP as many modern threats traverse enterprise cloud platforms and knowledge of these platforms is a necessity for modern incident response engagements
• A college or university degree is a plus

Benefits

• Comprehensive medical, dental, and vision insurance.
• 401(k) with employer matching.
• Generous paid time off and holidays.
• Flexible spending accounts and health savings accounts.
• Employee assistance programs.
• Training and development opportunities.
• Adoption assistance program.
• Flexible work, with in-person gatherings for key moments based on role, team, and business needs.

Company Overview