Remote Senior DFIR Engagement Lead | Incident Response Expert

Zurich Insurance; United States; Remote; USD 100,000 - 164,000; Full time

Benefits offered by this job

Remote work within US

Travel up to 5%

Total rewards/benefits

Bonuses/merit increases

Job summary

SpearTip, the cybersecurity consulting arm of Zurich Resilience Solutions, seeks an experienced Senior Incident Response DFIR Consultant—Engagement Lead to drive complex investigations and client engagements. You will deliver expert consulting, coordinate with executives, and guide containment and recovery for urgent cyber incidents.

The role is remote within the United States with up to 5% travel. Requires strong client service, strategic guidance, and leadership of junior staff across critical

Qualifications

• Bachelor's degree (or higher) in a cyber security field or equivalent.
• Apprenticeship plus 6+ years of cyber security experience is acceptable.
• Alternative: high school diploma plus 7+ years in cyber security.

Responsibilities

• Lead incident response engagements for external clients and drive containment and recovery.
• Provide 24/7 on-call IR services and coordinate with stakeholders.
• Deliver executive briefs and actionable reports to clients.
• Mentor junior staff and ensure high-quality client deliverables.
• Maintain case documentation and time tracking for billing.

Skills

Threat Intelligence

Malware Analysis

Client Communication

Network Forensics

Cloud Security

Ransomware Investigations

Executive Reporting

Project Management

Threat Actor Communications

Education

Bachelor's degree or higher in Cyber Security or related field

Zurich Cybersecurity Technician Apprenticeship

High School Diploma or equivalent with 7+ years cyber security experience

Tools

Industry-standard for DFIR tools

Job description

SpearTip, the cybersecurity consulting arm of Zurich Resilience Solutions, seeks an experienced Senior Incident Response DFIR Consultant—Engagement Lead to drive complex investigations and client engagements. You will deliver expert consulting, coordinate with executives, and guide containment and recovery for urgent cyber incidents.

The role is remote within the United States with up to 5% travel. Requires strong client service, strategic guidance, and leadership of junior staff across critical