Project Manager, Digital Forensics & Incident Response (DFIR)

surefirecyber; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Remote role

Equity

Generous PTO

Medical/Dental/Vision coverage

Job summary

Surefirecyber is seeking a Project Manager to oversee cyber incident response engagements from initiation through post-incident review. The role coordinates with digital forensics, advisory, and client-facing teams to keep investigations on schedule and within scope.

Ideal candidates have foundational IR experience, strong communication, and the ability to turn ambiguity into structured, well-documented delivery. Remote, US-based.

Qualifications

• Bachelor's degree or equivalent experience as a project manager, ideally in cyber incident response.
• Familiarity with incident response methodologies and frameworks such as NIST SP 800-61, ISO 27035, and SANS.
• Exposure to SIEM, EDR, and threat intelligence platforms.
• Strong communication, analytical and problem-solving skills in a fast-paced environment.
• Ability to identify risks, develop mitigation strategies, and coordinate cross-functional stakeholders.
• Willingness to participate in after-hours on-call and weekend rotations.

Responsibilities

• Lead end-to-end cyber incident response projects, including scoping, scheduling, resource allocation, budgeting, and deliverables tracking.
• Build and maintain project artifacts such as incident response strategies, handling procedures, stakeholder communication plans, and risk registers.
• Coordinate across IT, legal, HR, external clients, and vendors to ensure smooth execution during active incidents.
• Facilitate project meetings, monitor goals, milestones, dependencies, and elevate risks with mitigation strategies.
• Drive post-incident reviews and lessons-learned sessions, translating findings into continuous improvement actions.
• Contribute to incident response teams by clarifying roles and responsibilities and fostering a collaborative environment.
• Provide after-hours, on-call, and weekend rotational support to address critical incidents.

Skills

Project management

Cyber incident response

Communication

Risk management

Stakeholder coordination

Prioritization

Education

Bachelor's degree or equivalent experience in project management

Tools

SIEM platforms

EDR solutions

Threat intelligence platforms

Job description

Role overview

A remote, U.S.-based Project Manager role coordinating cyber incident response engagements from initiation through post-incident review. The position partners closely with digital forensics, advisory, and client-facing teams to keep complex security investigations on schedule, within scope, and aligned to business objectives. It suits someone with foundational cyber incident response experience who enjoys turning ambiguity into structured, well-documented delivery.

Responsibilities

• Lead end-to-end cyber incident response projects, including scoping, scheduling, resource allocation, budgeting, and deliverables tracking
• Build and maintain project artifacts such as incident response strategies, handling procedures, stakeholder communication plans, and risk registers in collaboration with engagement leads, consultants, and engineers
• Coordinate across IT, legal, HR, external clients, and vendors to ensure smooth execution and clear communication during active incidents
• Facilitate project meetings, monitor goals, milestones, and dependencies, and elevate risks with mitigation strategies
• Drive post-incident reviews and lessons-learned sessions, translating findings into continuous improvement actions for future engagements
• Contribute to incident response teams by clarifying roles and responsibilities and fostering a collaborative, results-driven environment
• Provide after-hours, on-call, and weekend rotational support to address critical incidents and maintain continuous coverage

Requirements

• Bachelor's degree or equivalent professional experience as a project manager, ideally within cyber incident response management
• Familiarity with incident response methodologies and frameworks such as NIST SP 800-61, ISO 27035, and the SANS incident response lifecycle
• Exposure to SIEM platforms, endpoint detection and response (EDR) solutions, and threat intelligence platforms
• Strong communication, analytical, and problem-solving skills, with the ability to manage multiple priorities in a fast-paced environment
• Demonstrated ability to identify risks, develop mitigation strategies, and coordinate cross-functional stakeholders
• Willingness to participate in after-hours on-call and weekend rotations to support critical incidents

Benefits and work setup

• Remote, full-time exempt position
• Competitive compensation plan plus equity for all team members
• Generous paid time off and floating holidays
• Employer-paid medical, dental, and vision premiums for employees and dependents
• 401(k) matching, FSA and HSA options, life and AD&D, and disability coverage
• Paid parental leave
• Professional development opportunities supported by a structured performance management and coaching platform