State Licensed DFIR Consultant
virtual vocationsDenver (CO)
State Licensed DFIR Consultant
Posted today
virtual vocationsDenver (CO)
SENIORITY
Senior
About the role
To support a growing cybersecurity practice, the full-time State Licensed DFIR Consultant will investigate and respond to cybersecurity incidents, conduct digital forensic investigations, and serve as the primary point of contact for external clients, working both independently and collaboratively in a remote environment.
Key Responsibilities:
Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery
Prepare detailed incident reports and maintain thorough documentation of all incident response activities
Collaborate with cross-functional teams and communicate effectively with stakeholders to guide clients through forensic investigations
Required Qualifications:
Proven experience in Digital Forensics and Incident Response (DFIR)
Strong knowledge of digital forensics tools and techniques, such as X-Ways
Experience with incident response frameworks and methodologies like NIST or SANS
Strong understanding of network protocols, operating systems, and security technologies
Flexibility to support occasional travel and work outside standard business hours
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.