Senior Incident Response & Client Engagement Lead

Surefire Cyber; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Surefire Cyber Inc. is seeking an Engagement Lead to oversee client-facing incident response engagements from detection to recovery, coordinating resources with forensic consultants and client stakeholders.

The role requires leading investigations in Linux/Windows, working with cloud platforms (AWS, Azure, GCP), and delivering clear verbal and written incident reports, including after-hours on-call support.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or relevant professional experience.
• Experience leading active cybersecurity engagements, DFIR investigations, and client/legal/insurer interactions.
• Experience conducting security investigations in Linux and Windows environments.
• Understanding of cloud platforms including AWS, Azure, and GCP.
• Knowledge of digital forensic artifacts and tools (ELK, Axiom, Encase, FTK, Volatility, or Open-Source tools).
• Proficiency in forensic analysis, threat assessments, and post-incident reviews.
• Ability to provide on-call/weekend rotational support.

Responsibilities

• Lead and oversee active client-facing incident response engagements from detection to recovery.
• Conduct scoping calls with clients to define incident scope, objectives, and expectations.
• Coordinate resources and expertise with other Engagement Leads and Forensic Consultants.
• Build and cultivate strong client relationships based on trust and collaborative problem-solving.
• Communicate advanced cybersecurity concepts and produce clear verbal and written incident reports.
• Provide after-hours on-call and weekend rotational support as required.

Skills

Incident response

Forensic analysis

Threat assessment

Post-incident reviews

Client-facing leadership

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

ELK

Axiom

Encase

FTK

Volatility

Open-Source tools

Job description

Surefire Cyber Inc. is seeking an Engagement Lead to oversee client-facing incident response engagements from detection to recovery, coordinating resources with forensic consultants and client stakeholders.

The role requires leading investigations in Linux/Windows, working with cloud platforms (AWS, Azure, GCP), and delivering clear verbal and written incident reports, including after-hours on-call support.