> Markdown version of [/jobs/ext/2872620-senior-digital-forensics-incident-response-consultant-dt-12-remote](https://www.wearedevelopers.com/jobs/ext/2872620-senior-digital-forensics-incident-response-consultant-dt-12-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Digital Forensics & Incident Response Consultant - DT #12 - Remote - **Company:** Compu-Vision - IT - **Location:** Philadelphia, PA, United States (Remote available) - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** Cyber Security, Digital Forensics, Python (Programming Language), Network Forensics, Windows PowerShell, Security Information and Event Management, Forensic Toolkit, Mitre Att&ck, Malware, Cyber Threat Analysis, Cybercrime, Encase - **Published:** September 13, 2026 - **Apply:** https://www.careerjet.com/jobad/us5d343887d954bbf042efb7897adf4caf ## About the Role * Extensive professional experience in Digital Forensics and Incident Response (DFIR). * Demonstrated experience leading complex cybersecurity investigations. * Strong expertise in digital evidence collection, preservation, and forensic analysis. * Proven ability to lead incident containment and response activities. * Experience conducting root-cause and attack-path analysis. * Hands-on experience investigating ransomware, insider threats, APTs, and data breaches. * Strong knowledge of EDR/XDR and SIEM platforms. * Experience with malware, memory, and network forensics. * Strong understanding of MITRE ATT&CK and modern attacker techniques. * Proficiency with forensic tools such as EnCase, FTK, Magnet AXIOM, and/or Volatility. * Strong Python and/or PowerShell scripting capabilities. * Excellent technical writing, presentation, and stakeholder communication skills. * Experience mentoring junior investigators and working with multidisciplinary security teams. * Ability to work independently in a remote consulting environment. ## Description We are seeking an experienced Senior Digital Forensics & Incident Response (DFIR) Consultant to lead complex cybersecurity investigations and provide senior-level technical guidance across digital forensics and incident response engagements. The consultant will lead investigations involving sophisticated threats such as ransomware, insider threats, advanced persistent threats (APTs), and data breaches. The role requires strong expertise in forensic analysis, incident containment, attack-path reconstruction, malware investigation, and executive-level reporting. The ideal candidate will also provide technical mentorship to junior investigators and collaborate closely with SOC, threat intelligence, legal, and compliance teams., DFIR Leadership * Lead complex digital forensic and incident response engagements from investigation through remediation. * Direct evidence collection, preservation, forensic analysis, and incident containment activities. * Establish investigation strategies, priorities, and technical approaches. * Provide senior-level technical guidance throughout active security incidents. Forensic & Incident Investigation * Perform detailed digital forensic investigations across endpoints, systems, memory, and networks. * Conduct root-cause and attack-path analysis. * Investigate major cybersecurity incidents, including: * Ransomware * Insider threats * Advanced Persistent Threats (APTs) * Data breaches * Analyze attacker activity, persistence mechanisms, lateral movement, and indicators of compromise. * Correlate evidence from multiple sources to reconstruct attack timelines. * Support malware, memory, and network forensic investigations. Incident Response * Coordinate containment, eradication, and recovery activities. * Work with security and infrastructure teams to identify affected systems and limit threat impact. * Support threat hunting and post-incident investigations. * Provide recommendations for remediation and security improvements. Reporting & Consulting * Develop detailed technical findings and forensic reports. * Prepare concise executive-level incident summaries for leadership and stakeholders. * Present investigation findings, attack paths, root causes, and remediation recommendations. * Provide technical consulting and guidance to client security teams. Collaboration & Mentorship * Collaborate with: * SOC teams * Threat intelligence teams * Legal teams * Compliance teams * Security and infrastructure teams * Mentor and provide technical guidance to junior forensic investigators. * Establish and promote effective DFIR investigation methodologies and best practices. Key Technical Skills Digital Forensics & Incident Response * DFIR * Digital forensics * Incident response * Evidence collection and preservation * Root-cause analysis * Attack-path analysis * Incident timeline development Security Operations * EDR / XDR * SIEM * Threat intelligence * Threat hunting * Incident containment and remediation Advanced Threat Analysis * Malware analysis * Memory forensics * Network forensics * Ransomware investigations * Insider threat investigations * APT investigations * Data breach investigations * MITRE ATT&CK Forensic & Analysis Tools * EnCase * FTK * Magnet AXIOM * Volatility Scripting & Automation * Python * PowerShell ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Training Bots on Deliveroo Data, Alexa Can Swear and Mushroom Electronics - Julia Kordick](https://www.wearedevelopers.com/videos/1839-training-bots-on-deliveroo-data-alexa-can-swear-and-mushroom-electronics-julia-kordick) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)