Senior DFIR Incident Response Consultant (Remote)

Zurich NA; Jackson (MS); Hybrid; USD 100,000 - 164,000; Full time

Benefits offered by this job

Bonuses

Job summary

Zurich North America is seeking a Senior Incident Response Consultant (DFIR) to lead external investigations and digital forensics engagements. You will serve clients during high-stress security incidents, delivering containment, remediation guidance, and executive-level reporting.

The role requires building trust with CIOs, IT leaders, legal counsel, and insurers, with up to 20% travel and potential remote deployments across the United States.

Qualifications

• Bachelors or equivalent IT experience with cybersecurity focus.
• Experience in incident response, DFIR, and client engagements.
• Strong report writing and executive briefing abilities.

Responsibilities

• Lead external incident response engagements and forensics investigations.
• Provide 24/7 emergency response and on-site or remote containment.
• Deliver executive briefings and business impact reports.
• Coordinate with IT, legal, insurance, and leadership during crises.
• Develop retainer services, tabletop exercises, and security evaluations.
• Mentor junior staff and ensure quality client deliverables.

Skills

Digital Forensics

Incident Response

Threat Intelligence

Malware Analysis

Executive Communication

Windows Forensics

Linux Forensics

Network Forensics

Cloud Security

Forensic Tools

Ransomware Investigations

Project Management

Education

Bachelor's degree or higher in IT

Cybersecurity Certification/Apprentice path

MS Office proficiency

Tools

EnCase

FTK

X-Ways

Volatility

Job description

Zurich North America is seeking a Senior Incident Response Consultant (DFIR) to lead external investigations and digital forensics engagements. You will serve clients during high-stress security incidents, delivering containment, remediation guidance, and executive-level reporting.

The role requires building trust with CIOs, IT leaders, legal counsel, and insurers, with up to 20% travel and potential remote deployments across the United States.