[Remote] Principal Consultant, Digital Forensic and Incident Response (DFIR) (Remote)
Note: The job is a remote job and is open to candidates in USA. Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents. The Principal Consultant will represent Surefire Cyber as a skilled technical forensic and consulting expert, managing incident response engagements and providing guidance to clients during high-pressure situations.ResponsibilitiesDemonstrate genuine curiosity, a commitment to continuous learning, and contribute valuable insights to support the team's knowledge growthForensically lead incident response engagements, working with other team members to guide clients through the entire incident response lifecycle from detection to recoveryConduct advanced forensic analysis to identify the scope and impact of security incidents meticulously and precisely, including malware analysis and reverse engineering when necessaryIndependently manage investigations ranging in size and complexity such as Business Email Compromises and Ransomware engagementsProvide career development for a Forensic team consisting of 3-4 Consultants/Senior Consultants, by investing in their professional development conducting regular one-on-one conversations and providing guidance and recommendations on training opportunitiesIdentify, articulate, and explain attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention effortsConvey complex forensic findings to technical and non-technical stakeholders clearly and understandablyProvide comprehensive supporting evidence for written reports detailing incident findings, and analysisReview, provide well thought out input, and provide guidance to other team members on forensic reportsCollaborate with internal teams, external partners, and clients to refine and document incident response processes and best practicesSpearhead research and development activities to stay up to date with the latest forensic tools, techniques, and methodologiesContribute to the development of internal processes and support broader organizational initiativesProvide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverageSkillsBachelor's degree in Cybersecurity, Computer Science, Information Technology, related degree, industry certifications, or former professional experience as a Senior or Principal Forensic Consultant, Senior or Principal Cybersecurity Consultant, or as a Senior or Principal Incident ResponderHold industry certifications or showcase equivalent professional experience as a Principal Consultant, highlighting a profound mastery of Digital Forensics and Incident ResponsePrevious experience in leading the forensic workstreams and teams ranging from 3-4 in size on complex investigationsDemonstrate advanced proficiency in utilizing common digital forensic artifacts and tools such as ELK, Axiom, Encase, FTK (Forensic Toolkit), Open-Source, or comparable industry-standard toolsShowcase professional experience in the effective use of network analysis and intrusion detection tools, exemplifying a deep understanding of their application in cybersecurityPossess in-depth knowledge of cybersecurity principles and best practices, underlining a comprehensive understanding of the intricacies of the cybersecurity landscapeExhibit excellent problem-solving skills and meticulous attention to detail, displaying an ability to navigate complex challenges with precision and thoroughnessDemonstrate the ability to work effectively under pressure, manage multiple competing priorities, and consistently meet tight deadlines, reflecting resilience and efficiency in high-stakes scenariosDisplay exceptional communication skills, both written and verbal, ensuring the ability to convey complex technical information clearly and comprehensivelyExpress eagerness to mentor, share knowledge, and actively contribute to the expansion of the team's expertise, fostering a collaborative and growth-oriented environmentExhibit the capability to provide after-hours (on-call/weekend rotational) support as required, demonstrating a commitment to addressing critical incidents promptly and maintaining continuous coverageBenefits20% BonusCompetitive compensation plan and total rewards package for team membersRemote workforceGenerous paid time off plan and floating holidaysPaid parental leaveEmployer paid premiums for both team members and their dependents for medical, dental, and visionComprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits.Professional development and career advancement opportunitiesWe prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth.Company OverviewSurefire Cyber delivers swift, strong response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats with end-to-end response capabilities. It was founded in 2022, and is headquartered in Elkridge, Maryland, USA, with a workforce of 11-50 employees. Its website is https://surefirecyber.com.