Senior Incident Response DFIR Consultant – Engagement Lead

About the role

Join Zurich Resilience Solutions' SpearTip team as a senior DFIR consultant leading incident response engagements for external clients. This remote U.S. position offers up to 5% travel and 24/7 on‑call responsibilities.

Key responsibilities

• Lead incident response engagements, performing digital forensics, malware analysis, and threat actor attribution.
• Provide 24/7 remote containment, evidence preservation, and business disruption minimisation.
• Conduct forensic examinations of compromised systems, networks, and cloud environments using industry‑standard tools.
• Deliver executive‑level briefings and written reports translating technical findings into business impact assessments.
• Coordinate with IT, legal, insurance carriers, law enforcement, and executive leadership throughout incidents.
• Mentor junior consultants and ensure quality of client deliverables.
• Develop scopes of work, cost estimates and identify opportunities for expanded engagements.

Required profile

• Bachelor’s degree with 5+ years of cyber security experience, or equivalent combination of education and experience.
• Proven experience leading complex DFIR engagements for external clients.
• Strong client communication and stakeholder management skills, including interaction with C‑level executives.

Required skills

• Advanced digital forensics and incident response.
• Intermediate threat intelligence and malware analysis.
• Advanced Windows/Linux operating system forensics.
• Intermediate network forensics and log analysis.
• Intermediate cloud security (Azure, AWS, M365).
• Advanced proficiency with forensic tools such as EnCase, FTK, X‑Ways, Volatility, Binalyze.
• Advanced ransomware and business email compromise investigations.
• Advanced report writing and executive communication.
• Intermediate project management.