Remote Senior DFIR Engagement Lead, Incident Response

Zurich Insurance; United States, Northern America, Americas; Remote; USD 100,000 - 164,000; Full time

Job summary

Zurich North America is seeking a Senior Incident Response DFIR Consultant - Engagement Lead to direct external client engagements across incident response, forensics, and containment efforts. You will guide complex investigations, communicate with C-level executives, and mentor junior staff from a remote US location.

The role requires building client relationships, delivering executive-level briefings, and coordinating with IT, legal, and insurance partners. Travel up to 5% is expected.

Qualifications

• Bachelor’s degree or higher in a Cyber Security-related field with 5+ years domain experience.
• Zurich Cybersecurity Technician Apprentice path including certification and 6+ years in Cyber Security.
• Alternative: High School Diploma and 7+ years experience in Cyber Security.

Responsibilities

• Lead incident response engagements for external clients, performing DFIR investigations and threat actor attribution.
• Provide 24/7 on-call incident response remotely to contain threats and minimize disruption.
• Perform forensic examinations of systems, networks, and cloud environments with industry tools.
• Deliver executive summaries and reports translating technical findings to business impact.
• Coordinate with IT, legal, insurance, and executives to manage response activities and communications.
• Offer guidance on ransomware, BEC investigations, insider threats, and APT incidents.
• Mentor junior consultants and ensure high-quality client deliverables.
• Maintain case documentation, time tracking, and engagement status for billing and project management.
• Collaborate with insurers, MSPs, and law firms for cyber insurance and breach response.
• Stay current on threats and forensic methodologies through research and professional development.
• Contribute to thought leadership via blogs, conferences, and client education.

Skills

Threat Intelligence

Advanced Communication

Network Forensics

Cloud Security

Ransomware Investigations

Report Writing

Project Management

Threat Actor Communications

Education

Bachelor’s degree + 5+ yrs in Cyber Security

Zurich Cybersecurity Technician Apprentice + 6+ yrs

High School Diploma or Equivalent + 7+ yrs

Job description

Zurich North America is seeking a Senior Incident Response DFIR Consultant - Engagement Lead to direct external client engagements across incident response, forensics, and containment efforts. You will guide complex investigations, communicate with C-level executives, and mentor junior staff from a remote US location.

The role requires building client relationships, delivering executive-level briefings, and coordinating with IT, legal, and insurance partners. Travel up to 5% is expected.