Senior DFIR Engagement Lead – Remote

Surefire Cyber Inc.; United States; Remote; USD 130,000 - 165,000; Full time

Benefits offered by this job

Remote workforce

Generous PTO

Parental leave

Premium health coverage

401K matching

Job summary

Surefire Cyber Inc. is seeking a Principal Engagement Lead to manage multiple active cybersecurity engagements, coordinating with clients, insurers, and legal counsel. You will guide scoping calls, coordinate forensic experts, and ensure timely, high-quality resolutions.

The role requires a strong DFIR background, incident response leadership, and fluency in communicating complex findings to diverse stakeholders. Remote work within the USA is supported, with after-hours coverage as needed.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity.
• Experience leading active cybersecurity engagements including IR and DFIR.
• Ability to investigate security events across Linux/Windows and cloud platforms.

Responsibilities

• Lead and oversee client-facing incident response engagements from detection to recovery.
• Define scope with clients and align objectives across teams.
• Coordinate resources and interact with insurers and legal counsel.
• Deliver clear written and verbal incident findings and recommendations.
• Mentor teammates and share knowledge; provide after-hours support when needed.

Skills

DFIR

Incident response

Client mgmt

Team leadership

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

ELK

Axiom

EnCase

FTK

Volatility

Open-Source tools

Job description

Surefire Cyber Inc. is seeking a Principal Engagement Lead to manage multiple active cybersecurity engagements, coordinating with clients, insurers, and legal counsel. You will guide scoping calls, coordinate forensic experts, and ensure timely, high-quality resolutions.

The role requires a strong DFIR background, incident response leadership, and fluency in communicating complex findings to diverse stakeholders. Remote work within the USA is supported, with after-hours coverage as needed.