Principal Consultant, Digital Forensic and Incident Response (DFIR)

Responsibilities

• Forensically lead incident response engagements from detection to recovery
• Conduct advanced forensic analysis, including malware analysis and reverse engineering
• Independently manage complex investigations such as Ransomware and Business Email Compromise
• Mentor and provide career development for a team of 3-4 consultants
• Identify and explain attack vectors, threat tactics, and attacker techniques
• Convey complex forensic findings to both technical and non-technical stakeholders
• Provide comprehensive supporting evidence for written incident reports
• Review and provide guidance on forensic reports produced by team members
• Collaborate with internal teams and external partners to refine incident response processes
• Spearhead research and development for new forensic tools and methodologies
• Provide after-hours on-call and weekend rotational support

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field
• Proven experience as a Senior or Principal Forensic Consultant or Incident Responder
• Experience leading forensic workstreams and teams of 3-4 people
• Proficiency with digital forensic tools such as ELK, Axiom, Encase, or FTK
• Experience with network analysis and intrusion detection tools
• Strong problem-solving skills and meticulous attention to detail
• Ability to work under pressure and meet tight deadlines
• Excellent written and verbal communication skills
• Availability for on-call/weekend rotational support

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents.