Senior DFIR Engagement Lead (Remote Incident Response)

Zurich North America; Las Vegas (NV); On-site; USD 100,000 - 164,000; Full time

Job summary

Zurich North America is seeking a Senior DFIR Consultant to lead external incident response engagements, perform digital forensics, and provide strategic guidance during security crises. The role emphasizes client engagement with C-level stakeholders, cross-functional collaboration, and rapid containment in high-pressure incidents.

The position supports remote work within the United States, with up to 5% travel, and offers a comprehensive benefits package with a 15% short-term incentive bonus.

Qualifications

• Bachelor’s degree in Cyber Security or related field required or equivalent experience.
• Zurich Cybersecurity Technician Apprentice with Cyber Security Certification considered.
• Minimum 5+ years in Cyber Security; alternatives with higher education credentials accepted.

Responsibilities

• Lead incident response engagements for external clients, including digital forensics investigations and threat attribution.
• Provide 24/7 on-call incident response to contain threats and minimize disruption.
• Conduct forensic examinations of compromised systems, networks, and cloud environments.
• Deliver executive briefs and reports translating findings into business impact.

Skills

Digital Forensics & Incident Response

Threat Intelligence & Malware Analysis

Client Communication & Stakeholder Mgm

Windows/Linux Forensics

Network Forensics & Log Analysis

Cloud Security

Forensic Tool Proficiency (EnCase/FTK/

Ransomware Investigations

Report Writing & Exec Communication

Project Management

Threat Actor Communications

Education

Bachelor's degree in Cyber Security or related field

High School Diploma or Equivalent with 7+ years exp in Cyber Security

Zurich Cybersecurity Technician Apprentice program with Cyber Security Certification

Tools

EnCase/FTK/X-Ways/Volatility/Binalyze

Job description

Zurich North America is seeking a Senior DFIR Consultant to lead external incident response engagements, perform digital forensics, and provide strategic guidance during security crises. The role emphasizes client engagement with C-level stakeholders, cross-functional collaboration, and rapid containment in high-pressure incidents.

The position supports remote work within the United States, with up to 5% travel, and offers a comprehensive benefits package with a 15% short-term incentive bonus.