[Hiring] DFIR Consultant @GuidePoint Security

Role Description

The DFIR Consultant is a core technical contributor within GuidePoint Security’s Digital Forensics & Incident Response (DFIR) Practice. Working under the guidance of Senior and Principal Consultants, the DFIR Consultant performs investigations across a range of engagement types, produces clear and accurate analysis, and communicates findings effectively to clients while continuing to build depth across core DFIR disciplines.

• The DFIR Practice performs reactive incident response investigations, forensic investigations, proactive threat discovery and threat hunting, and Purple Team exercises.
• Apply technical skills, creativity, and adaptability to deliver results to clients across a variety of sectors.

Roles and Responsibilities

• Technical Execution & Engagement Delivery
  • Perform DFIR investigations as a contributing technical resource, including host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
  • Support effective engagement communication, time management, and coordination throughout the investigative lifecycle.
  • Produce clear, accurate engagement deliverables that detail technical findings, recommendations, business impact, and realistic remediation strategies for both technical and managerial audiences.
• Collaboration & Continuous Improvement
  • Collaborate with peers and engagement leads across concurrent engagements, sharing findings and coordinating to deliver consistent, high-quality results.
  • Use scripting and automation to reduce manual processes and improve the efficiency of DFIR tasks.
  • Continually strengthen relevant skills, knowledge, and abilities to grow across core DFIR disciplines and stay current with the information security industry.
• Client & Practice Contribution
  • Support client relationships by providing information and guidance during engagements and serving as a reliable technical contributor.
  • Contribute to a perpetually evolving service portfolio driven by emerging threats and diverse client needs.
  • Maintain a strong desire to learn, adapt, and improve alongside a rapidly growing company; perform other duties as assigned.
• Engagement & Availability Expectations
  • Maintain availability outside standard business hours during high-severity incident surges.
  • Participate in on-call rotation as appropriate for the role.
  • Proactively surface gaps in engagement delivery, processes, or client communication to engagement leads.
  • Set an example of professionalism, urgency, and ownership on every engagement.

Qualifications

• High School diploma and 5 years of experience, OR Bachelor’s degree and 2 years of experience, OR Master’s degree.
• Hands-on experience across core DFIR disciplines: host forensics, network traffic analysis, malware handling/triage, log review, and BEC analysis.
• Strong written and verbal communication skills, with the ability to present technical findings to both technical and managerial audiences.
• Creativity and adaptability to solve challenging problems in a rapidly changing environment.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Prior experience in a consulting or professional services role.
• Experience with established DFIR methodology and process.
• Experience with a variety of industry-related solutions including EDR, NDR, XDR, SIEM, FW, NGAV, Velociraptor, and others.
• Proficiency with common programming and scripting languages including PowerShell, Python, Bash, Go, or similar.
• Experience with enterprise cloud technologies such as Amazon Web Services, Google Workspace, Microsoft 365, and Azure.
• Awareness of attacker techniques, advanced threat groups, and integration of threat intelligence into an investigation.
• Relevant industry certifications such as, but not limited to, GCFA, GCFE, GCIH, GCIA, GDAT, GREM, or CISSP.

Travel Requirements

• Up to 20% travel.

Physical Requirements

• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.