Principal Consultant, Digital Forensics & Incident Response

Responsibilities

• Forensically lead incident response engagements from detection to recovery
• Conduct advanced forensic analysis, including malware analysis and reverse engineering
• Independently manage complex investigations such as Ransomware and Business Email Compromise
• Mentor and provide career development for a team of 3-4 consultants
• Identify and explain attack vectors, threat tactics, and attacker techniques
• Convey complex forensic findings to both technical and non-technical stakeholders
• Provide comprehensive supporting evidence for written incident reports
• Collaborate with internal teams and external partners to refine incident response processes
• Spearhead research and development for new forensic tools and methodologies
• Provide after-hours on-call and weekend rotational support

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
• Proven experience as a Senior or Principal Forensic Consultant or Incident Responder
• Experience leading forensic workstreams and teams of 3-4 people
• Proficiency with digital forensic tools such as ELK, Axiom, Encase, or FTK
• Experience with network analysis and intrusion detection tools
• Strong problem-solving skills and meticulous attention to detail
• Ability to work effectively under pressure and meet tight deadlines
• Excellent written and verbal communication skills
• Willingness to participate in an on-call rotation

Benefits

• Competitive compensation plan and total rewards package
• Remote workforce
• Generous paid time off and floating holidays
• Paid parental leave
• Employer-paid medical, dental, and vision premiums for employees and dependents
• 401K matching program
• Disability, FSA, HSA, and Life/AD&D benefits
• Professional development and career advancement opportunities

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats.