[Hiring] Senior Consultant, DFIR @LevelBlue LLC

Role Description

We are seeking a highly skilled and motivated Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. The ideal candidate will be responsible for investigating and responding to cybersecurity incidents, conducting digital forensic and incident response investigations, being the primary point of contact for external clients, and being able to work independently against engagement milestones from forensics to log analysis to report writing. This role requires deep technical expertise, strong analytical skills, and the ability to meet client deadlines quickly and efficiently.

Key Responsibilities

• Digital Forensics & Incident Response:
  • Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery in a client-facing capacity.
  • Analyse and investigate security breaches to determine the root cause and impact.
  • Conduct digital forensic science-based incident response investigations on various digital devices, including servers and end user workstations, network systems, and SaaS platforms.
  • Collect, preserve, and analyse digital evidence in accordance with legal and regulatory requirements.
• Reporting and Documentation:
  • Prepare detailed incident reports, articulating a story of the incident for a non-technical audience.
  • Maintain accurate and thorough documentation of all incident response activities and forensic investigations.
• Collaboration and Communication:
  • Work closely with cross-functional teams inclusive of DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, etc.
  • Collaborate with Client teams including IT, legal, compliance, and external vendors to support expert delivery during engagements.
  • Serve as the primary point of contact to guide clients through the forensic investigation and incident containment.
  • Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes.

Qualifications

• Proven experience in DFIR.
• Strong knowledge of digital forensics tools and techniques, including X-Ways or similar forensic tooling.
• Experience with incident response frameworks and methodologies, such as NIST, SANS, or similar.
• Excellent analytical and problem-solving skills.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent written and verbal communication skills.
• Experience and interest in interfacing with clients or customers.
• Ability to work independently and manage multiple projects simultaneously.
• Flexibility to support occasional travel and work outside standard business hours, including evenings and weekends.

Preferred Qualifications

• Bachelor's or Master’s degree in Digital Forensics, Computer Science-focused or closely related field of study and expertise.
• DFIR industry accepted certifications.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation and analysis.
• Knowledge of database formats for investigative and knowledge purposes.
• Knowledge of Azure, AWS, Oracle, and/or GWP for modern incident response engagements.

Education

• A high school diploma or equivalent is required; a college or university degree is a plus.

Benefits

• Comprehensive medical, dental, and vision insurance.
• 401(k) with employer matching.
• Generous paid time off and holidays.
• Flexible spending accounts and health savings accounts.
• Employee assistance programs.
• Training and development opportunities.
• Adoption assistance program.