Senior Consultant, Digital Forensics and Incident Response – DFIR

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Serve as a technical and consulting resource for Surefire Cyber, assisting clients across various industries during active incident response engagements.

• Identify and analyze intrusions while guiding clients through high-pressure response situations.

• Support clients throughout the entire incident response lifecycle, from detection to recovery.

• Conduct sophisticated forensic analysis to assess the scope and impact of security incidents.

• Execute malware analysis and reverse engineering when required.

• Lead small to medium-sized forensic investigations, including engagements related to Business Email Compromise and ransomware.

• Identify, articulate, and explain attack vectors, threat tactics, and techniques used by attackers.

• Effectively communicate complex forensic findings to both technical and non-technical stakeholders.

• Provide supporting evidence for written incident reports.

• Collaborate with internal teams, external partners, and clients to document incident response processes and best practices.

• Engage in research and development to remain updated with forensic tools, techniques, and methodologies.

• Contribute to internal processes and broader organizational initiatives.

• Mentor junior team members.

• Provide after-hours on-call and weekend rotational support for critical incidents.

⛳️ Requirements

• Advanced expertise in Digital Forensics and Incident Response (DFIR).

• Previous experience in client-facing roles, forensic analysis, and investigations.

• Proven history of conducting forensic analysis independently on small to medium investigations.

• Background in cybersecurity, computer science, information technology, or a related field, along with industry certifications or previous professional experience as a Senior Forensic Consultant, Senior Cybersecurity Consultant, or Senior Incident Responder.

• Proficiency with digital forensic artifacts and tools such as ELK, Axiom, EnCase, FTK (Forensic Toolkit), open-source, or similar tools.

• Professional experience with network analysis and intrusion detection tools.

• Comprehensive understanding of cybersecurity principles and best practices.

• Strong problem-solving abilities and meticulous attention to detail.

• Capability to work under pressure, manage competing priorities, and meet tight deadlines.

• Outstanding written and verbal communication skills.

• Willingness to mentor others, share knowledge, and enhance the collective knowledge base.

• Availability for after-hours on-call and weekend rotational support as needed.

• Expertise in every area listed is not mandatory; candidates are encouraged to apply while continuing their learning journey.

🏝️ Benefits

• Competitive compensation package and equity for all team members.

• Fully remote workforce.

• Generous paid time off policy and floating holidays.

• Employer-covered premiums for team members and their dependents for medical, dental, and vision insurance.

• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.

• Paid parental leave.

• Opportunities for professional development and career advancement.

• Robust performance management platform providing ongoing coaching, clear feedback, recognition, and opportunities for career growth.

• Continuous professional development initiatives.