Remote Principal DFIR Consultant — Incident Response

Surefire Cyber Inc.; United States; Remote; USD 100,000 - 160,000; Full time

Benefits offered by this job

Remote workforce

Generous paid time off

Paid parental leave

Employer-paid health premiums

Health, vision, dental benefits

401K matching

Professional development

Job summary

Surefire Cyber is seeking a Principal Consultant for Digital Forensics and Incident Response to act as a technical forensic and consulting expert on active engagements across industries. You will detect intrusions, guide clients through high-pressure response scenarios, and provide after-hours support as needed.

You will lead a forensic team of 3–4 consultants, mentor on career development, and collaborate with internal and client teams to document processes, develop best practices, and stay

Qualifications

• Bachelor’s degree or equivalent in a cyber-focused field; professional experience accepted.
• Senior-level DFIR proficiency with proven client-facing investigations.
• Track record leading 3–4 person forensic teams on complex incidents.

Responsibilities

• Lead forensic engagements, guiding clients through the full IR lifecycle from detection to recovery.
• Perform advanced forensic analysis, including malware analysis and reverse engineering when needed.
• Independently manage investigations of varying size and complexity.
• Provide mentorship and career development for a Forensic team of 3–4 consultants.
• Articulate attack vectors and tactics to guide mitigation and prevention.
• Communicate findings clearly to technical and non-technical stakeholders.

Skills

DFIR expertise

Incident response leadership

Forensic analysis

Mentoring

Effective communication

Client-facing

Ability to work after hours

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

ELK

Axiom

EnCase

FTK

Open-Source forensic tools

Job description

Surefire Cyber is seeking a Principal Consultant for Digital Forensics and Incident Response to act as a technical forensic and consulting expert on active engagements across industries. You will detect intrusions, guide clients through high-pressure response scenarios, and provide after-hours support as needed.

You will lead a forensic team of 3–4 consultants, mentor on career development, and collaborate with internal and client teams to document processes, develop best practices, and stay