Principal DFIR Consultant

Responsibilities

• Serve as the technical authority for complex, high-severity, and high-visibility DFIR engagements
• Conduct advanced host forensics, network analysis, malware reverse engineering, and cloud forensics
• Design, document, and maintain DFIR investigation methodologies, playbooks, and SOPs
• Mentor Senior Consultants and Analysts to develop the next generation of DFIR leads
• Support pre-sales activities including technical scoping, proposal development, and SOW review
• Represent the company through conference presentations, webinars, and industry publications
• Provide surge capacity and participate in on-call rotations for high-severity incident surges

Requirements

• 8+ years of hands-on DFIR experience
• 10+ combined years of IT and information security experience
• Demonstrated experience leading high-severity engagements (ransomware, APT, nation-state)
• Expert-level proficiency in host forensics, network forensics, log analysis, and cloud IR
• Exceptional written and verbal communication skills for executive and legal audiences
• Proven track record of mentoring technical staff
• Experience developing DFIR methodologies or tooling

Preferred Qualifications

• Prior consulting experience at a leading cybersecurity firm
• Proficiency in scripting languages such as Python, PowerShell, Bash, or Go
• Deep experience with EDR, NDR, XDR, SIEM, and Velociraptor
• Cloud incident response expertise in AWS, Azure, or Google Workspace
• Relevant certifications such as GREM, GCFA, GCFE, GDAT, GCIH, GCIA, or CISSP

About the Company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since 2011, GuidePoint has grown to over 1,200 employees, serving as a trusted advisor to more than 6,200 customers.