Principal Consultant, Digital Forensics and Incident Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as a technical forensic and consulting authority for Surefire Cyber, assisting clients across various sectors during active incident response situations.

• Identify and evaluate intrusions while guiding clients through critical response scenarios.

• Offer after-hours support as necessary.

• Lead incident response efforts from detection through to recovery with a forensic approach.

• Perform advanced forensic analysis, including malware analysis and reverse engineering when required.

• Independently oversee investigations related to Business Email Compromise and ransomware incidents.

• Mentor and develop the skills of a forensic team consisting of 3-4 Consultants/Senior Consultants through personalized discussions and training support.

• Recognize and articulate attack vectors, threat strategies, and attacker methodologies to assist in mitigation and prevention efforts.

• Convey complex forensic results to both technical and non-technical audiences.

• Provide evidence and analysis for comprehensive incident reports.

• Review forensic reports and offer guidance to team members.

• Collaborate with internal teams, external partners, and clients to improve incident response processes and best practices.

• Spearhead research and development for forensic tools, techniques, and methodologies.

• Contribute to internal processes and wider organizational initiatives.

• Provide on-call or weekend support for critical incidents and ensure continuous coverage.

⛳️ Requirements

• Experience in Cybersecurity, Computer Science, Information Technology, or a related field, along with industry certifications or relevant professional experience as a Senior or Principal Forensic Consultant, Senior or Principal Cybersecurity Consultant, or Senior or Principal Incident Responder.

• Possess industry certifications or demonstrate equivalent professional experience as a Principal Consultant, showcasing deep expertise in Digital Forensics and Incident Response.

• Prior experience in leading forensic workstreams and teams of 3-4 members on intricate investigations.

• Advanced skills in utilizing common digital forensic artifacts and tools such as ELK, Axiom, EnCase, FTK (Forensic Toolkit), open-source tools, or other industry-standard tools.

• Professional experience with network analysis and intrusion detection tools.

• Comprehensive knowledge of cybersecurity principles and best practices.

• Strong problem-solving abilities coupled with keen attention to detail.

• Capacity to perform effectively under pressure, manage multiple competing priorities, and adhere to tight deadlines.

• Outstanding written and verbal communication skills.

• Willingness to mentor, share knowledge, and enhance team expertise.

• Availability for after-hours (on-call/weekend rotational) support as needed.

🏝️ Benefits

• Competitive compensation package and equity for all employees.

• Remote work environment.

• Generous paid time off policy and floating holidays.

• Employer-covered premiums for medical, dental, and vision for both employees and their dependents.

• Comprehensive health, vision, dental benefits, a 401K matching program, disability insurance, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.

• Paid parental leave.

• Opportunities for professional development and career advancement.

• A robust performance management system that offers ongoing coaching, clear feedback, recognition, and career growth opportunities.