Senior DFIR Incident Response Lead - Client-Facing

Posted yesterday

forensic focusBrooklyn (NY)

Digital Forensics Analysts Other Scientific and Technical Consulting Services

SENIORITY

Manager

Apply

About the role

Forensic Focus in the United States seeks a Lead Principal Consultant DFIR to lead end-to-end incident response engagements, from identification and containment through forensic examination and recovery, serving as the primary client contact and delivery lead. You will collect evidence, analyze artifacts, review logs, and produce narrative incident reports for diverse audiences. This role requires strong DFIR expertise, X-Ways proficiency, familiarity with NIST/SANS frameworks, and excellent

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.