Digital Forensics Consultant

Digital Forensics Consultant

About Enduir

Enduir is a leading cybersecurity and technology consulting firm dedicated to providing cutting-edge solutions to clients across various industries. With a focus on innovation and excellence, we deliver robust cybersecurity and technology resilience strategies and services to safeguard our clients' digital infrastructure from evolving threats.

Position Summary

Enduir is hiring for a Digital Forensics Consultant to support Clients with incident response, breach investigations, and the forensic components of threat hunting and proactive engagements. The person in this role will work under the direction of the forensics lead to collect and analyze forensic evidence, help reconstruct incident timelines, and produce documentation that holds up for technical, executive, and, where matters are directed by outside counsel, legal audiences.

Key Responsibilities

• Collect, image, and preserve digital evidence from endpoints, servers, cloud platforms, and network sources under the direction of the case lead.
• Perform forensic analysis, including memory, disk, network, and log analysis, to identify indicators of compromise and help reconstruct incident timelines.
• Support breach and incident response investigations by triaging affected systems, scoping impacted data, and assisting with root cause determination.
• Conduct malware triage to help identify the tools, techniques, and procedures used by a threat actor, escalating findings to the case lead as needed.
• Draft investigation notes, evidence logs, and sections of client facing findings reports for review by the case lead or senior consultant.
• Support engagements conducted at the direction of outside counsel, following Enduir's attorney client privilege protocols and etiquette standards.
• Coordinate with the case lead, Enduir's project operations team, and client stakeholders on assigned tasks throughout an engagement.
• Stay current on forensic tools, evidentiary standards, threat of actor techniques, and flag relevant developments to the case lead.

Preferred Qualifications

• Bachelor's degree in computer science, cybersecurity, information systems, or a related field, or equivalent practical experience.
• 0-4 years of experience in digital forensics, incident response, or a closely related technical discipline.
• Working knowledge of forensic imaging and analysis practices and chain of custody requirements.
• Familiarity with forensic tooling such as EnCase, FTK, Magnet AXIOM, Sleuth Kit, X-Ways, Volatility, or KAPE.
• Familiarity with or interest in AI-assisted forensic and investigative tooling is a plus.
• Exposure to next-generation forensics approaches, including AI-enhanced investigative techniques, as part of our evolving forensics practice
• Exposure to endpoint detection and response platforms such as CrowdStrike, SentinelOne, or Microsoft Defender.
• Strong written and verbal communication skills, including the ability to translate technical findings for non-technical audiences.
• Ability to manage sensitive and confidential information with discretion, including matters subject to attorney client privilege.
• Experience with cloud forensics and log analysis across major cloud and SaaS platforms.
• Willingness to be on call during weekends and after standard work hours to support time-sensitive incident response needs.
• Prior experience supporting engagements at the direction of outside counsel.

Benefits

• Competitive salary and benefits package.
• Collaborative and innovative work environment
• Opportunities for career advancement
• Medical, dental, and vision insurance
• 100% company-paid life, short-term and long-term disability insurance
• 401(k) with company match