Principal DFIR Consultant - Remote (Anywhere in the U.S.)

GuidePoint Security is seeking a Principal DFIR Consultant to join their Incident Response and Forensics team. As the highest individual contributor level within the DFIR Practice, the Principal will serve as the practice's foremost technical authority, leading critical investigations, shaping practice operations, and mentoring staff.

The Principal DFIR Consultant will be responsible for:

• Technical Leadership & Engagement Execution: serving in the Oversight role on complex or high-severity engagements, leading critical investigations, and conducting advanced technical execution
• Practice Development & Mentorship: designing and maintaining DFIR investigation methodologies, mentoring staff, and contributing to business development
• Client & Business Development: building trusted relationships with key clients, supporting pre-sales activities, and representing GuidePoint Security externally

Requirements include:

• 8+ years of hands-on DFIR experience
• 10+ combined years of IT and information security experience
• Demonstrated experience in a Lead or senior technical role on high-severity engagements
• Expert-level proficiency across multiple DFIR disciplines
• Exceptional written and verbal communication skills

Preferred experience includes:

• Prior consulting or professional services experience at a leading DFIR or cybersecurity firm
• Advanced proficiency with scripting and tooling
• Deep experience with EDR, NDR, XDR, SIEM, and commercial/open-source forensic platforms
• Cloud incident response expertise

Benefits include:

• Remote workforce
• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option