Senior Consultant, Digital Forensics and Incident Response (DFIR) (Remote)

Surefire Cyber•Hanover, MD

6d•Remote

About The Position

Surefire Cyber is seeking a Senior Consultant to join its Digital Forensics and Incident Response team. This is a full-time remote role serving as a technical and consulting resource for clients across diverse industries during active incident response engagements. The consultant detects and analyzes intrusions, conducts forensic investigations, and guides clients through high-pressure response situations with clear communication and after-hours support as needed. The role leads forensic investigations on small to medium incidents, including Business Email Compromise and ransomware engagements, and contributes to more advanced investigations with support from Engagement Leads and Principal Consultants. The consultant also mentors less experienced colleagues, communicates findings to technical and non-technical stakeholders, supports incident response processes and reporting, and contributes to research, development, and organizational initiatives. Surefire Cyber describes the role as collaborative and offers competitive compensation, company equity, benefits, and professional development opportunities.

Requirements

Experience in cybersecurity, computer science, information technology, or a related area through a degree, industry certifications, or relevant professional experience as a Senior Forensic Consultant, Senior Cybersecurity Consultant, or Senior Incident Responder.
Proficiency with common digital forensic artifacts and tools, such as ELK, Axiom, EnCase, FTK (Forensic Toolkit), open-source tools, or comparable tools.
Professional experience with network analysis and intrusion detection tools.
In-depth knowledge of cybersecurity principles and best practices.
Strong problem-solving skills and attention to detail.
Ability to work effectively under pressure, manage competing priorities, and meet tight deadlines.
Excellent written and verbal communication skills.
Ability and willingness to mentor, share knowledge, and continue learning.
Ability to provide after-hours, on-call, and rotating weekend support as required.

Responsibilities

Contribute to client-facing incident response engagements and guide clients through the incident response lifecycle from detection to recovery.
Conduct advanced forensic analysis to identify the scope and impact of security incidents, including malware analysis and reverse engineering when necessary.
Lead forensic investigations on small to medium incidents, such as Business Email Compromises and ransomware engagements, with support from Engagement Leads and Principal Consultants on more complex investigations.
Mentor less experienced team members and share knowledge and expertise.
Identify and explain attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention efforts.
Communicate complex forensic findings clearly to technical and non-technical stakeholders.
Provide supporting evidence for written reports detailing incident findings and analysis.
Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.
Research current forensic tools, techniques, and methodologies.
Contribute to internal processes and broader organizational initiatives.
Provide after-hours, on-call, and rotating weekend support as required for critical incidents and continuous coverage.
Continue learning and contribute insights, seeking guidance when necessary.

Benefits

Competitive compensation plan and equity for all team members.
Generous paid time off plan and floating holidays.
Employer-paid medical, dental, and vision premiums for team members and their dependents.
401(k) matching program.
Disability benefits.
Flexible Spending Accounts (FSA) and Health Savings Account (HSA).
Life and AD&D benefits.
Paid parental leave.
Professional development and career advancement opportunities.
Ongoing coaching, feedback, recognition, and career growth opportunities through a performance management platform.