Principal Engagement Lead

Surefire Cyber; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Surefire Cyber Inc. is seeking an Engagement Lead to oversee client-facing incident response engagements from detection to recovery, coordinating resources with forensic consultants and client stakeholders.

The role requires leading investigations in Linux/Windows, working with cloud platforms (AWS, Azure, GCP), and delivering clear verbal and written incident reports, including after-hours on-call support.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or relevant professional experience.
• Experience leading active cybersecurity engagements, DFIR investigations, and client/legal/insurer interactions.
• Experience conducting security investigations in Linux and Windows environments.
• Understanding of cloud platforms including AWS, Azure, and GCP.
• Knowledge of digital forensic artifacts and tools (ELK, Axiom, Encase, FTK, Volatility, or Open-Source tools).
• Proficiency in forensic analysis, threat assessments, and post-incident reviews.
• Ability to provide on-call/weekend rotational support.

Responsibilities

• Lead and oversee active client-facing incident response engagements from detection to recovery.
• Conduct scoping calls with clients to define incident scope, objectives, and expectations.
• Coordinate resources and expertise with other Engagement Leads and Forensic Consultants.
• Build and cultivate strong client relationships based on trust and collaborative problem-solving.
• Communicate advanced cybersecurity concepts and produce clear verbal and written incident reports.
• Provide after-hours on-call and weekend rotational support as required.

Skills

Incident response

Forensic analysis

Threat assessment

Post-incident reviews

Client-facing leadership

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

ELK

Axiom

Encase

FTK

Volatility

Open-Source tools

Job description

About the Company

Surefire Cyber is redefining the incident response model by delivering a swifter, stronger response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Our client-centric approach reduces stress and provides clients the confidence needed to prepare, respond, and recover from cyber incidents.

Responsibilities

• Lead and oversee active client-facing incident response engagements from detection to recovery
• Conduct scoping calls with clients to define incident scope, objectives, and expectations
• Coordinate resources and expertise with other Engagement Leads and Forensic Consultants
• Build and cultivate strong client relationships based on trust and collaborative problem-solving
• Communicate advanced cybersecurity concepts and produce clear verbal and written incident reports
• Provide after-hours on-call and weekend rotational support as required

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or relevant professional experience
• Experience leading and managing active cybersecurity engagements, DFIR investigations, and client/legal/insurer interactions
• Experience conducting security investigations in Linux and Windows environments
• Understanding of cloud platforms including AWS, Azure, and GCP
• Knowledge of digital forensic artifacts and tools (ELK, Axiom, Encase, FTK, Volatility, or Open-Source tools)
• Proficiency in forensic analysis, threat assessments, and post-incident reviews
• Ability to provide on-call/weekend rotational support

Preferred Qualifications

• Expertise in all listed technical areas (though mastery in every single area is not strictly required)
• Strong ability to teach and mentor colleagues