Principal Consultant, Digital Forensics and Incident Response (DFIR) (Remote)

Surefire Cyber•Hanover, MD

6d•Remote

About The Position

Surefire Cyber is hiring a remote, full-time Principal Consultant to serve as a technical forensic and consulting expert for clients across diverse industries during active incident response engagements. The role involves detecting and analyzing intrusions, guiding clients through high-pressure response situations, and providing after-hours support as needed. The Principal Consultant leads forensic workstreams and incident response engagements from detection through recovery, independently managing investigations of varying sizes and complexities, including business email compromise and ransomware incidents. The role also includes advanced forensic analysis, communicating findings to technical and non-technical stakeholders, supporting written reports, reviewing colleagues’ reports, mentoring a team of 3–4 Consultants/Senior Consultants, and contributing to research, process development, and organizational initiatives.

Requirements

Experience in cybersecurity, computer science, information technology, or a related field through a degree, industry certifications, or relevant professional experience.
Industry certifications or equivalent professional experience demonstrating advanced mastery of Digital Forensics and Incident Response.
Previous experience leading forensic workstreams and teams of 3–4 on complex investigations.
Advanced proficiency with common digital forensic artifacts and tools such as ELK, Axiom, Encase, FTK, open-source tools, or comparable industry-standard tools.
Professional experience using network analysis and intrusion detection tools.
In-depth knowledge of cybersecurity principles and best practices.
Strong problem-solving skills and meticulous attention to detail.
Ability to work under pressure, manage competing priorities, and meet tight deadlines.
Excellent written and verbal communication skills, including the ability to explain complex technical information clearly.
Ability and willingness to mentor colleagues and contribute to team expertise.
Ability to provide after-hours on-call and weekend rotational support as required.

Responsibilities

Lead incident response engagements and guide clients through the incident response lifecycle from detection to recovery.
Conduct advanced forensic analysis to determine the scope and impact of security incidents, including malware analysis and reverse engineering when necessary.
Independently manage investigations of varying sizes and complexity, including business email compromise and ransomware engagements.
Provide career development and guidance to a forensic team of 3–4 Consultants/Senior Consultants through regular one-on-ones and recommendations on training opportunities.
Identify and explain attack vectors, threat tactics, and attacker techniques to inform mitigation and prevention efforts.
Communicate complex forensic findings clearly to technical and non-technical stakeholders.
Provide supporting evidence for written reports detailing incident findings and analysis.
Review forensic reports and provide thoughtful input and guidance to team members.
Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.
Lead research and development activities to stay current with forensic tools, techniques, and methodologies.
Contribute to internal processes and broader organizational initiatives.
Provide after-hours on-call and weekend rotational support as required.
Contribute insights and knowledge to support the team's ongoing learning.

Benefits

Competitive compensation plan and equity for all team members.
Remote workforce.
Generous paid time off and floating holidays.
Employer-paid medical, dental, and vision premiums for team members and their dependents.
401(k) matching program.
Disability benefits.
Flexible Spending Accounts (FSA) and Health Savings Account (HSA).
Life and AD&D benefits.
Paid parental leave.
Professional development and career advancement opportunities.
Performance management platform providing ongoing coaching, feedback, recognition, and career growth opportunities.