Surefirecyber
Surefirecyber

Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)

operationsfull-timeRemote
SALARY
Not listed
WORK TYPE
remote
JOB TYPE
full-time
INDUSTRY
general
Apply for this position
✦ AutoApply Let us apply to roles like this on your behalf.
Learn more

About the role

<div class="content-intro"><h2>About Surefire Cyber</h2>

<p>Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents – and fortify their cyber resilience after an event.</p>

<p>Surefire Cyber’s approach and delivery are designed by industry veterans who have worked shoulder-to ­shoulder with law firms, insurance carriers, brokers, law enforcement, and impacted organizations in responding to cyber incidents. We are marshaling this experience to address the industry’s persistent challenges of efficiency, predictability, and transparency.</p></div><h3>Job Title: Principal Consultant, Digital Forensics & Incident Response</h3>

<h3><span data-contrast="auto">Location:</span><span data-contrast="auto"> Remote (USA)</span><span data-ccp-props="{}"> </span></h3>

<h3><span data-contrast="auto">Role:</span><span data-contrast="auto"> Full time</span><span data-ccp-props="{}"> / Exempt</span></h3>

<h3>What Makes You Stand Out</h3>

<p><span data-contrast="none">You are a seasoned cybersecurity professional specializing in Digital Forensics and Incident Response (DFIR), with extensive experience, including client-facing roles, sophisticated forensic analysis, and a proven track record of independently managing investigations of varying sizes and complexities. Committed to continuous learning, you actively seek opportunities to expand your knowledge base, contributing to the team's collective expertise.</span><span data-ccp-props="{"335559739":40}"> </span></p>

<p><span data-contrast="none">In addition to technical proficiency, you excel at forensically guiding engagements and prioritizing competing priorities effectively. Demonstrated through a consistent delivery of high-quality results, your passion lies in mentoring colleagues and navigating the dynamic landscape of security incidents, showcasing a deep understanding of the evolving threat landscape.</span><span data-ccp-props="{"335559739":40}"> </span></p>

<h2><strong><span data-contrast="auto">How You'll Make An Impact</span></strong></h2>

<p><span data-contrast="none">As a Principal Consultant, you will represent Surefire Cyber as a skilled technical forensic and consulting expert for clients </span><span data-contrast="none">across diverse industries during active </span><span data-contrast="none">incident response engagements. </span><span data-contrast="none">Leveraging your extensive experience and technical skills, you will play a pivotal role in detecting and analyzing intrusions, offering clear guidance to clients navigating high-pressure response situations, and providing after-hours support as needed.</span><span data-ccp-props="{"335559739":40}"> </span></p>

<h3><strong><span data-contrast="auto">Your Role In Action</span></strong></h3>

<ul>

<li><span data-contrast="none">Demonstrate genuine curiosity, a commitment to continuous learning, and contribute valuable insights to support the team's knowledge growth.</span><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW223281670 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW223281670 BCX0">Forensically lead</span> <span class="NormalTextRun SCXW223281670 BCX0">incident response engagements,</span><span class="NormalTextRun SCXW223281670 BCX0"> working with other </span><span class="NormalTextRun SCXW223281670 BCX0">team members </span><span class="NormalTextRun SCXW223281670 BCX0">to </span><span class="NormalTextRun SCXW223281670 BCX0">guid</span><span class="NormalTextRun SCXW223281670 BCX0">e </span><span class="NormalTextRun SCXW223281670 BCX0">clients through the entire incident response lifecycle from detection to recovery.</span><span class="NormalTextRun SCXW223281670 BCX0"> </span></span><span class="EOP SCXW223281670 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW229611955 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW229611955 BCX0">Conduct </span><span class="NormalTextRun SCXW229611955 BCX0">advanced</span><span class="NormalTextRun SCXW229611955 BCX0"> forensic analysis to </span><span class="NormalTextRun SCXW229611955 BCX0">identify</span><span class="NormalTextRun SCXW229611955 BCX0"> the scope and impact of security incidents meticulously and precisely</span><span class="NormalTextRun SCXW229611955 BCX0">, including malware analysis and reverse engineering when necessary.</span></span><span class="EOP SCXW229611955 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW100969642 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW100969642 BCX0">Independently </span><span class="NormalTextRun SCXW100969642 BCX0">manage</span><span class="NormalTextRun SCXW100969642 BCX0"> investigations</span> <span class="NormalTextRun SCXW100969642 BCX0">ranging in size and complexity </span><span class="NormalTextRun SCXW100969642 BCX0">such as Business Email Compromises and Ransomware engagements</span><span class="NormalTextRun SCXW100969642 BCX0">. </span></span><span class="EOP SCXW100969642 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW5187303 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW5187303 BCX0">Provide career development for a Forensic team consisting of 3-4 Consultants/Senior Consultants, by investing in </span><span class="NormalTextRun SCXW5187303 BCX0">their </span><span class="NormalTextRun SCXW5187303 BCX0">professional </span><span class="NormalTextRun SCXW5187303 BCX0">development conducting</span><span class="NormalTextRun SCXW5187303 BCX0"> regular </span><span class="NormalTextRun SCXW5187303 BCX0">one-on-one</span> <span class="NormalTextRun SCXW5187303 BCX0">conversations and</span><span class="NormalTextRun SCXW5187303 BCX0"> providing</span><span class="NormalTextRun SCXW5187303 BCX0"> guidance and </span><span class="NormalTextRun SCXW5187303 BCX0">recommendations</span><span class="NormalTextRun SCXW5187303 BCX0"> on training opportunities. </span></span><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW259024544 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW259024544 BCX0">Identify</span><span class="NormalTextRun SCXW259024544 BCX0">, </span><span class="NormalTextRun SCXW259024544 BCX0">articulate</span><span class="NormalTextRun SCXW259024544 BCX0">, and explain </span><span class="NormalTextRun SCXW259024544 BCX0">attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention efforts.</span></span><span class="TextRun Highlight SCXW259024544 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW259024544 BCX0"> </span></span><span class="EOP SCXW259024544 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW149720487 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW149720487 BCX0">Convey complex forensic findings to technical and non-technical stakeholders clearly and understandably.</span></span><span class="EOP SCXW149720487 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW124201120 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW124201120 BCX0">Provide </span><span class="NormalTextRun SCXW124201120 BCX0">comprehensive </span><span class="NormalTextRun SCXW124201120 BCX0">supporting evidence for</span><span class="NormalTextRun SCXW124201120 BCX0"> written reports detailing incident findings,</span><span class="NormalTextRun SCXW124201120 BCX0"> and</span><span class="NormalTextRun SCXW124201120 BCX0"> analysis</span><span class="NormalTextRun SCXW124201120 BCX0">.</span></span><span class="EOP SCXW124201120 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW263304936 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW263304936 BCX0">Review, provide well thought out input, and provide guidance to other team members on </span><span class="NormalTextRun SCXW263304936 BCX0">forensic reports. </span></span><span class="EOP SCXW263304936 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></span></li>

<li><span data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="EOP SCXW5187303 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"><span class="TextRun SCXW243775882 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW243775882 BCX0">Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.</span></span><span class="EOP SCXW243775882 BCX0" data-ccp-props="{"201341983":1,"335559739":320,"335559740":320}"> </span></span></span></li>

✦ Let us apply for you
We find roles like this and apply on your behalf. Cover letter written for each one. Plans from $15/mo. Cancel anytime.
Get AutoApply
Apply now
Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote) at Surefirecyber — Remote