Principal Consultant, Digital Forensics & Incident Response
Responsibilities
- Forensically lead incident response engagements from detection to recovery
- Conduct advanced forensic analysis, including malware analysis and reverse engineering
- Independently manage complex investigations such as Ransomware and Business Email Compromise
- Mentor and provide career development for a team of 3-4 consultants
- Identify and explain attack vectors, threat tactics, and attacker techniques
- Convey complex forensic findings to both technical and non-technical stakeholders
- Provide comprehensive supporting evidence for written incident reports
- Collaborate with internal teams and external partners to refine incident response processes
- Spearhead research and development for new forensic tools and methodologies
- Provide after-hours on-call and weekend rotational support
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
- Proven experience as a Senior or Principal Forensic Consultant or Incident Responder
- Experience leading forensic workstreams and teams of 3-4 people
- Proficiency with digital forensic tools such as ELK, Axiom, Encase, or FTK
- Experience with network analysis and intrusion detection tools
- Strong problem-solving skills and meticulous attention to detail
- Ability to work effectively under pressure and meet tight deadlines
- Excellent written and verbal communication skills
- Willingness to participate in an on-call rotation
Benefits
- Competitive compensation plan and total rewards package
- Remote workforce
- Generous paid time off and floating holidays
- Paid parental leave
- Employer-paid medical, dental, and vision premiums for employees and dependents
- 401K matching program
- Disability, FSA, HSA, and Life/AD&D benefits
- Professional development and career advancement opportunities
About the Company
Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats.
