RSI Security

Lead complex forensic investigations and resolve critical security incidents end-to-end including evidence collection, containment, and reporting. | 7-10 years DFIR experience, advanced certifications (GCFA, GCIH, CISSP), Public Trust clearance eligibility, mastery of NIST and compliance frameworks. | Digital Forensics & Incident Response (DFIR) Lead Engagement Profile: Digital Forensics & Incident Response (DFIR) Lead Classification: 1099 Independent Contractor Client Firm: RSI Security (Technical Operations) Primary Liaison: Sr. Manager of Technical Operations Compensation Structure: $100/hr Engagement Summary RSI Security is engaging an expert Digital Forensics & Incident Response (DFIR) Lead to spearhead complex forensic investigations and resolve critical security incidents. The Consultant will lead high-stakes engagements—including data breaches, ransomware response, and business email compromises—providing comprehensive analysis and actionable remediation strategies. Operating with full autonomy over methodologies, the Consultant is responsible for delivering expert-level forensic reporting and strategic guidance to safeguard client infrastructure. Scope of Services & Project Deliverables ● Forensic Lifecycle Management: Execute the end-to-end forensic process—collection, examination, analysis, and reporting—ensuring technical rigor and evidentiary integrity. ● Evidence Preservation: Oversee the identification and acquisition of digital evidence from diverse sources while maintaining a strictly documented chain of custody and forensic soundness. ● Adversary Emulation & Mapping: Correlate observed behaviors against the MITRE ATT&CK® framework to pinpoint defensive gaps, validate existing controls, and enhance detection engineering. ● Strategic Containment: Architect containment strategies that balance operational continuity with the need to isolate threats and preserve volatile evidence during active incidents. ● Ad-Hoc Incident Consulting: Provide advanced analytical response and advisory services during high-severity security events, subject to the Consultant's availability and a mutually agreed-upon task order. Service Level Agreement (SLAs) & Acceptance Criteria The Consultant’s services will be evaluated against the following deliverable standards: ≥ ● Deliverable Deadlines: Ensure 90% of scheduled assessment reports and project deliverables are submitted to the Primary Liaison by the agreed-upon SOW deadline. ● Critical Finding Latency: Communicate 100% of Critical/High vulnerabilities to RSI Security leadership within 1 business day of discovery to ensure immediate client protection. ● Advanced Incident SLAs: Maintain 95% compliance with response and ≥ resolution SLAs on any specialized security escalations accepted by the Consultant. Vendor Qualifications & Clearances ● Professional Experience: Minimum of 7–10 years of demonstrable experience in digital forensics, incident response, network traffic analysis, and malware triage as an independent consultant or agency. ● Industry Certifications: Must hold active, advanced security and forensic certifications (e.g., GCFA, GCIH, GNFA, CISSP, or equivalent). ● Clearance Requirement: Public Trust eligibility is required; Active Secret clearance is highly preferred, with the ability to obtain a Top Secret (TS/SCI) clearance if dictated by specific engagement task orders. ● Background Verification: The Consultant (and any personnel deployed by the Consultant) must successfully pass a comprehensive multi-jurisdictional background check prior to accessing sensitive RSI Security or client infrastructure. ● Technical & Compliance Proficiencies: Mastery of NIST SP 800-86 guidelines, enterprise network architecture, memory forensics, and advanced automation (Python, PowerShell, Bash). The Consultant must demonstrate proficiency in static and dynamic analysis—utilizing sandbox environments and reverse engineering platforms like Ghidra or IDA Pro—alongside deep experience in EDR/XDR ecosystems (CrowdStrike, SentinelOne, Defender). Expertise is required in cloud forensics (AWS, Azure, GCP), container security (Kubernetes), and alignment with the following compliance frameworks: ● ISO 42001 ● NIST 800-171 & NIST AI RMF ● PCI DSS, PCI SSF, & PCI ASV ● CMMC Advisory & Assessment (C3PAO) ● HITRUST & HIPAA ● CIS & SOC2 ● GDPR & CCPA Vendor Expectations & Security Standards ● Forensic & Ethical Standards: Uphold strict responsible-disclosure practices and safeguard sensitive data at all times. Ensure tools are used reasonably and appropriately, safeguarding sensitive information recorded during forensic collections. ● Proactive Communication: Translate complex attack narratives into clear, actionable reporting for both technical and non-technical audiences. ● Data Security & Privacy: Maintain rigorous operational security (OPSEC) over all client data, utilizing encrypted channels and immediately relinquishing access and data upon project completion

Lead complex forensic investigations and incident response engagements with full autonomy and deliver expert forensic reporting and strategic guidance. | 7-10 years DFIR experience, advanced security certifications, public trust clearance, mastery of forensic and incident response tools and frameworks. | Digital Forensics & Incident Response (DFIR) Lead Engagement Profile: Digital Forensics & Incident Response (DFIR) Lead Classification: 1099 Independent Contractor Client Firm: RSI Security (Technical Operations) Primary Liaison: Sr. Manager of Technical Operations Compensation Structure: $100/hr Engagement Summary RSI Security is engaging an expert Digital Forensics & Incident Response (DFIR) Lead to spearhead complex forensic investigations and resolve critical security incidents. The Consultant will lead high-stakes engagements—including data breaches, ransomware response, and business email compromises—providing comprehensive analysis and actionable remediation strategies. Operating with full autonomy over methodologies, the Consultant is responsible for delivering expert-level forensic reporting and strategic guidance to safeguard client infrastructure. Scope of Services & Project Deliverables ● Forensic Lifecycle Management: Execute the end-to-end forensic process—collection, examination, analysis, and reporting—ensuring technical rigor and evidentiary integrity. ● Evidence Preservation: Oversee the identification and acquisition of digital evidence from diverse sources while maintaining a strictly documented chain of custody and forensic soundness. ● Adversary Emulation & Mapping: Correlate observed behaviors against the MITRE ATT&CK® framework to pinpoint defensive gaps, validate existing controls, and enhance detection engineering. ● Strategic Containment: Architect containment strategies that balance operational continuity with the need to isolate threats and preserve volatile evidence during active incidents. ● Ad-Hoc Incident Consulting: Provide advanced analytical response and advisory services during high-severity security events, subject to the Consultant's availability and a mutually agreed-upon task order. Service Level Agreement (SLAs) & Acceptance Criteria The Consultant’s services will be evaluated against the following deliverable standards: ≥ ● Deliverable Deadlines: Ensure 90% of scheduled assessment reports and project deliverables are submitted to the Primary Liaison by the agreed-upon SOW deadline. ● Critical Finding Latency: Communicate 100% of Critical/High vulnerabilities to RSI Security leadership within 1 business day of discovery to ensure immediate client protection. ● Advanced Incident SLAs: Maintain 95% compliance with response and ≥ resolution SLAs on any specialized security escalations accepted by the Consultant. Vendor Qualifications & Clearances ● Professional Experience: Minimum of 7–10 years of demonstrable experience in digital forensics, incident response, network traffic analysis, and malware triage as an independent consultant or agency. ● Industry Certifications: Must hold active, advanced security and forensic certifications (e.g., GCFA, GCIH, GNFA, CISSP, or equivalent). ● Clearance Requirement: Public Trust eligibility is required; Active Secret clearance is highly preferred, with the ability to obtain a Top Secret (TS/SCI) clearance if dictated by specific engagement task orders. ● Background Verification: The Consultant (and any personnel deployed by the Consultant) must successfully pass a comprehensive multi-jurisdictional background check prior to accessing sensitive RSI Security or client infrastructure. ● Technical & Compliance Proficiencies: Mastery of NIST SP 800-86 guidelines, enterprise network architecture, memory forensics, and advanced automation (Python, PowerShell, Bash). The Consultant must demonstrate proficiency in static and dynamic analysis—utilizing sandbox environments and reverse engineering platforms like Ghidra or IDA Pro—alongside deep experience in EDR/XDR ecosystems (CrowdStrike, SentinelOne, Defender). Expertise is required in cloud forensics (AWS, Azure, GCP), container security (Kubernetes), and alignment with the following compliance frameworks: ● ISO 42001 ● NIST 800-171 & NIST AI RMF ● PCI DSS, PCI SSF, & PCI ASV ● CMMC Advisory & Assessment (C3PAO) ● HITRUST & HIPAA ● CIS & SOC2 ● GDPR & CCPA Vendor Expectations & Security Standards ● Forensic & Ethical Standards: Uphold strict responsible-disclosure practices and safeguard sensitive data at all times. Ensure tools are used reasonably and appropriately, safeguarding sensitive information recorded during forensic collections. ● Proactive Communication: Translate complex attack narratives into clear, actionable reporting for both technical and non-technical audiences. ● Data Security & Privacy: Maintain rigorous operational security (OPSEC) over all client data, utilizing encrypted channels and immediately relinquishing access and data upon project completion

Lead and execute marketing initiatives including content production, digital campaigns, SEO, and cross-channel marketing aligned with business goals. | 7+ years marketing experience, bachelor’s degree (master’s preferred), experience with HubSpot, Google Ads, SEO/SEM, strong project management, and ability to manage high-volume deliverables. | WE ARE HIRING Marketing Manager Location: Hybrid (Dallas, TX preferred) Type: Full-Time, W2 Department: Marketing Pay: Based on experience, education, geographic location, and market rates. Travel: <20% *** Please ensure you read through the entire job posting and you also understand the work model, expectations, requirements, location, and qualification requirements for this role. *** About Us RSI Security is a trusted leader in cybersecurity compliance and assessment, helping organizations navigate complex security frameworks and safeguard their operations. We combine deep expertise with innovative tools to deliver tailored solutions that empower businesses to thrive in a rapidly evolving digital landscape. Our culture emphasizes collaboration, continuous improvement, and professional growth. Team members contribute directly to impactful projects in a supportive, forward-thinking environment. About the Role The Marketing Manager owns and executes high-impact marketing initiatives across RSI Security and RSI Assurance. This role is responsible for leading a high-volume content production engine, managing cross-channel campaigns, optimizing digital strategies, and maintaining brand consistency. You’ll work closely with leadership to align marketing activities with business objectives and support the growth of our eCommerce platform and demand generation efforts. This is a dynamic role ideal for someone who thrives on creativity, data, and cross-functional collaboration. While the role offers hybrid flexibility, preference will be given to candidates located in or near Dallas, TX, where we have an established office presence. What You’ll Do Lead production of blogs, newsletters, campaigns, social media posts, collateral, and webinars. Own the editorial calendar and marketing strategy across digital platforms. Oversee website content, SEO, UX, and Google Ads/PPC performance. Manage marketing tools (e.g., HubSpot) and vendor relationships. Report on marketing KPIs, lead volume, ROI, and campaign performance. Coordinate with sales and executive teams to align campaigns with business goals. Support eCommerce and product marketing for digital services. Maintain consistent messaging across RSI Security and RSI Assurance. What You’ll Bring Bachelor’s degree in Marketing, Communications, Business, or related field (Master’s preferred). 7+ years of marketing experience, with proven success in content, campaigns, and digital strategy. Experience using HubSpot, Google Ads, SEO/SEM, and website management tools. Strong project management skills and ability to meet high-volume deliverables. Understanding of EOS (Entrepreneurial Operating System) is a plus. What We Offer Competitive salary and performance-based bonus Hybrid work model with preference for Dallas-based candidates Ongoing training and professional development A collaborative and mission-driven team environment Benefits (location-based): Personal wellness and employee assistance program Employer-paid medical, dental, vision coverage, and life insurance Paid holidays, vacation, and sick time Learning & Development: Educational reimbursement program E-learning training courses Company-sponsored leadership and mentoring program Financial Wellness: 401K retirement plan Performance bonus Other Perks: Employee referral bonus program Work and life balance Remote work Our commitment to equity, equal opportunity, inclusion, and diversity is part of our broader commitment to respecting fundamental human rights across our value chain. RSI Security is proud to be an Equal Opportunity Employer. The Company will consider for employment qualified applicants with arrest and conviction records. Equal Opportunity Employer/Veterans/Disabled For more information on RSI Security, please visit our website - www.rsisecurity.com or our social media RSI Security LinkedIn. On our career site, you will find some of the key steps you can expect to guide you along the way.