About 7AI
7AI is the foundational AI security company. Founded in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, we came out of stealth in February 2025 to take on the non-human work of the SOC. Our platform pairs a federated SIEM with AI agents that detect, investigate, respond, and hunt, plus dedicated threat hunting and threat intelligence, with humans on the loop.
Backed by $166 million in total funding from investors including Index Ventures and Blackstone, we're building the AI foundation for security operations in the agentic era, and we're still early. That's the appeal: you'll join at a pivotal stage where your work shapes what 7AI becomes, alongside security veterans who've built this before. Our culture runs on respect, collaboration, and a shared bar for excellence, all pointed at one goal, delivering real outcomes for the customers who trust us to defend them.
Overview
We are seeking a PLAID ELITE DFIR Consultant to join the DFIR team in Professional Services, part of PLAID ELITE, reporting to the Head of DFIR. You will lead emergency incident response engagements end to end, from the first scoping call to the final report for client and counsel, delivering people-led, AI-driven forensics on the 7AI platform.
You will investigate hands-on while shaping how we investigate: writing Velociraptor artifacts, building platform skills, and validating the AI that does the heavy lifting, so every finding we deliver is fast, evidence-based, and defensible.
What you'll do
- Run scoping calls with clients, breach counsel, and cyber insurance carriers to define each engagement's scope, objectives, and deliverables.
- Manage engagements end to end: plan the investigation, coordinate collection, track timeline and budget, and keep client and counsel updated on a steady cadence.
- Lead and personally perform enterprise investigations across host, network, cloud, SaaS, and application evidence, including ransomware, business email compromise, data theft, and intrusion matters.
- Serve as the escalation point for PLAID ELITE analysts when a case needs forensic collection, malware analysis, or root-cause determination, and mentor them through the investigation.
- Collect and analyze evidence through the 7AI platform and Velociraptor, writing and maintaining the VQL artifacts each case needs.
- Validate and test AiDFIR output: review AI-driven findings against source evidence for accuracy, completeness, and risk, flag errors and uncertainty, and keep expert human judgment on every conclusion that reaches a client.
