SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
LevelBlue, a leading pure-play managed security services provider, is seeking a Senior Cyber Consultant specializing in Digital Forensics and Incident Response (DFIR) to join its Global DFIR team. This role combines technical expertise with client-facing leadership, requiring you to investigate and respond to cybersecurity incidents, conduct forensic investigations, and serve as the primary point of contact for external clients throughout engagements.
Key Responsibilities:
Digital Forensics & Incident Response: Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery. Analyze and investigate security breaches to determine root cause and impact. Conduct digital forensic investigations on servers, workstations, network systems, and SaaS platforms. Collect, preserve, and analyze digital evidence in accordance with legal and regulatory requirements.
Reporting and Documentation: Prepare detailed incident reports with findings that tell a coherent story of the incident for non-technical audiences, not merely restating dates and times. Maintain accurate and thorough documentation of all incident response activities and forensic investigations.
Collaboration and Communication: Work internally with cross-functional teams (DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS). Work externally with client teams including IT, legal, compliance, and external vendors. Serve as primary point of contact to guide clients through forensic investigation and incident containment. Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes.
The role includes occasional travel and flexibility to work outside standard business hours, including evenings and weekends, as required. Participation in an on-call schedule supports operational continuity and timely response to critical incidents.
Requirements:
- Proven experience in DFIR
- Strong knowledge of digital forensics tools and techniques, including X-Ways or similar forensic tooling
- Experience with incident response frameworks and methodologies (NIST, SANS, or similar)
- Excellent analytical and problem-solving skills
- Strong understanding of network protocols, operating systems, and security technologies
- Excellent written and verbal communication skills
- Experience and interest in interfacing with clients or customers
- Ability to work independently and manage multiple projects simultaneously
- High school diploma or equivalent required
Preferred Qualifications:
- Bachelor's or Master's degree in Digital Forensics, Computer Science, or closely related field
- DFIR industry-accepted certifications
- Knowledge of scripting languages (Python, PowerShell) for automation and analysis
- Knowledge of database formats for investigative purposes
- Knowledge of Azure, AWS, Oracle, and/or GCP (cloud platforms are increasingly necessary for modern incident response)
