Principal Consultant, Digital Forensics and Incident Response (DFIR) (Remote)

The role

You will act as a technical forensic and consulting expert for clients during active incident response engagements. You will detect and analyze intrusions, lead incident response lifecycles, and manage investigations such as ransomware and Business Email Compromises.

What you will do

• Forensically lead incident response engagements from detection to recovery.
• Conduct advanced forensic analysis including malware analysis and reverse engineering.
• Independently manage investigations such as Business Email Compromises and Ransomware.
• Provide career development for a Forensic team of 3-4 Consultants/Senior Consultants.
• Identify and explain attack vectors, threat tactics, and attacker techniques.
• Convey complex forensic findings to technical and non-technical stakeholders.
• Provide supporting evidence for written reports detailing incident findings.
• Review and provide guidance to team members on forensic reports.
• Collaborate with internal teams, external partners, and clients to refine incident response processes.
• Spearhead research and development for forensic tools, techniques, and methodologies.

Required qualifications

• Experience in Cybersecurity, Computer Science, Information Technology, related degree, industry certifications, or former professional experience as a Senior or Principal Forensic Consultant, Senior o
• Hold industry certifications or showcase equivalent professional experience as a Principal Consultant.
• Previous experience in leading forensic workstreams and teams ranging from 3-4 in size on complex investigations.
• Advanced proficiency in utilizing common digital forensic artifacts and tools such as ELK, Axiom, Encase, FTK (Forensic Toolkit), Open-Source, or comparable industry-standard tools.
• Professional experience in the effective use of network analysis and intrusion detection tools.
• In-depth knowledge of cybersecurity principles and best practices.
• Excellent problem-solving skills and meticulous attention to detail.
• Ability to work effectively under pressure, manage multiple competing priorities, and meet tight deadlines.
• Exceptional communication skills, both written and verbal.
• Ability to provide after-hours (on-call/weekend rotational) support as required.

Benefits

• Competitive compensation plan and equity
• Remote workforce
• Generous paid time off plan and floating holidays
• Employer paid premiums for team members and dependents for medical, dental, and vision
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits
• Paid parental leave
• Professional development and career advancement opportunities
• Performance management platform for coaching, feedback, and recognition

Before you apply

• Submit interest and application to our website
• Preliminary phone interview with the Talent & People Team
• Virtual/Teams Technical interview with Engagement Leads
• Virtual/Teams interview with Chief Delivery Officer and an Engagement Lead
• Virtual/Teams interview with CEO

About the company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Their approach is designed by industry veterans to address challenges of efficiency, predictability, and transparency.