Senior DFIR Incident Response Lead - Remote

Zurich NA; Augusta (ME); Remote; USD 100,000 - 164,000; Full time

Job summary

Zurich North America is seeking a Senior Incident Response DFIR Consultant - Engagement Lead to act as the incident response engagement lead, delivering expert consulting and digital forensics services to external clients during urgent cyber security incidents.

You will lead complex investigations, provide strategic guidance during breaches, and drive containment and recovery efforts while building long-term client relationships with C-level executives and IT leaders.

Qualifications

• Bachelor's degree or higher in Cyber Security or related field.
• Cyber Security Certification and 5+ years experience if Apprenticeship path is taken.
• High School Diploma with 7+ years experience in Cyber Security.

Responsibilities

• Lead incident response engagements for external clients focusing on DFIR investigations.
• Provide 24/7 on-call IR services remotely to contain threats.
• Conduct forensic examinations of systems, networks, and cloud environments.
• Deliver executive briefings and reports translating findings to business impact.
• Coordinate with stakeholders including IT, legal, insurance, and leadership.
• Mentor junior consultants and ensure quality client deliverables.
• Maintain case documentation, time tracking, and engagement status for billing.

Skills

Digital Forensics

Incident Response

Threat Intelligence

Client Communication

Windows/Linux Forensics

Network Forensics

Cloud Security

Forensic Tools

Ransomware Investigations

BEC Investigations

Executive Reporting

Project Management

Threat Actor Communications

Education

Bachelor's degree

Cybersecurity Apprenticeship

High School Diploma

Tools

EnCase

FTK

X-Ways

Volatility

Binalyze

Job description

Zurich North America is seeking a Senior Incident Response DFIR Consultant - Engagement Lead to act as the incident response engagement lead, delivering expert consulting and digital forensics services to external clients during urgent cyber security incidents.

You will lead complex investigations, provide strategic guidance during breaches, and drive containment and recovery efforts while building long-term client relationships with C-level executives and IT leaders.