Principal Engagement Lead (Remote)

$130,000 - $165,000/Yr

Surefire Cyber - Elkridge, MD

Full-time - Senior

Remote - Elkridge, MD

About the position

The Principal Engagement Lead at Surefire Cyber is a key role focused on leading digital forensic and incident response (DFIR) engagements. This position requires a seasoned cybersecurity professional who excels in managing complex incidents and collaborating with clients, cyber insurers, and legal counsel. The role emphasizes a client-centric approach, ensuring timely resolutions while minimizing downtime and enhancing long-term security goals.

Responsibilities

• Lead and oversee active client-facing incident response engagements, guiding clients through the entire incident response lifecycle from detection to recovery.
• Conduct scoping calls with clients to define the incident scope, objectives, and expectations of each engagement.
• Work closely with other Engagement Leads and Forensic Consultants to ensure effective coordination of resources and expertise on client matters.
• Build and cultivate strong client relationships based on trust, open communication, and collaborative problem-solving.
• Provide well-informed solutions that go beyond immediate client challenges to achieve long-term security goals.
• Communicate advanced cybersecurity concepts both internally and externally and produce clear and concise verbal and written reports detailing incident findings and analysis.
• Actively knowledge share with team members, cultivating a culture of continuous learning, and stay up to date on industry trends, emerging threats, and best practices.
• Provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or relevant professional work experience in these disciplines.
• Former professional experience in leading and managing active cybersecurity engagements, including incident response and digital forensics investigations.
• Experience in conducting security investigations in Linux and Windows environments.
• Understanding of cloud platforms and security considerations within AWS, Azure, and GCP.
• Knowledge of digital forensic artifacts and tools such as ELK, Axiom, Encase, FTK, Volatility, or Open-Source tools.
• Proficiency in conducting forensic analysis, threat assessments, and post-incident reviews.
• Ability to provide after-hours (on-call/weekend rotational) support as required.

Nice-to-haves

• Eagerness to learn from the team, grow knowledge, and teach colleagues.
• Comfortable with working with other team members to expand knowledge base and experience.

Benefits

• Competitive compensation plan and total rewards package for team members
• Remote workforce
• Generous paid time off plan and floating holidays
• Paid parental leave
• Employer paid premiums for both team members and their dependents for medical, dental, and vision
• Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits
• Professional development and career advancement opportunities