Senior DFIR Consultant – Engagement Lead

Job not on LinkedIn

🕒 5 days ago

🇺🇸 United States – Remote

💵 $100.2k - $164.1k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zurich Insurance

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

⚖️ Legal

Consulting • Healthcare • Legal

Zurich Insurance is a global insurance and risk-management company offering a broad range of products and services including commercial and personal property & casualty insurance, life and critical-illness cover, pensions and retirement solutions, savings and investment products, claims and risk advisory, and specialty offerings such as microinsurance and travel coverage. The company also runs investment funds, sustainability and climate-focused initiatives, innovation and technology programs, and a foundation for community and environmental projects. Zurich serves both individual consumers and corporate clients across many countries, emphasizing governance, ESG reporting, digital innovation, and resilience.

📋 Description

• Lead incident response engagements for external clients, conducting digital forensics investigations, malware analysis, and threat actor attribution • Provide 24/7 on-call incident response services remotely to contain active threats, preserve evidence, and minimize business disruption • Conduct forensic examinations of compromised systems, networks, and cloud environments • Deliver executive-level briefings and written reports translating technical findings into business impact assessments and recommendations • Coordinate with IT teams, legal counsel, insurance carriers, law enforcement, and executive leadership • Provide guidance on ransomware negotiations, business email compromise, insider threat, and advanced persistent threat incidents • Mentor junior consultants and analysts and provide quality assurance on client deliverables • Maintain case documentation, time tracking, and engagement status reporting • Partner with insurance brokers, managed service providers, and law firms on incident response services • Research emerging threats, attack techniques, and forensic methodologies • Contribute to blogs, conference presentations, and client education materials • Develop scopes of work and cost estimates • Identify expanded client engagement opportunities • Support client presentations, capability demonstrations, and proposal development • Ensure deliverables meet quality standards and agreed timelines and budgets • Travel as required

🎯 Requirements

• Bachelor's degree and 5 or more years experience in the Cyber Security domain, OR Zurich Cybersecurity Technician Apprentice including Cyber Security Certification and 6 or more years experience in the Cyber Security domain, OR High School Diploma or Equivalent and 7 or more years experience in the Cyber Security domain • Advanced proficiency in Digital Forensics & Incident Response • Intermediate proficiency in Threat Intelligence & Malware Analysis • Advanced proficiency in Client Communication & Stakeholder Management • Advanced proficiency in Windows/Linux Operating System Forensics • Intermediate proficiency in Network Forensics & Log Analysis • Intermediate proficiency in Cloud Security (Azure/AWS/M365) • Advanced proficiency with forensic tools including EnCase, FTK, X-Ways, Volatility, and Binalyze • Advanced proficiency in Ransomware & Business Email Compromise investigations • Advanced proficiency in Report Writing & Executive Communication • Intermediate proficiency in Project Management • Threat Actor Communications Experience • No employment sponsorship offered • Ability to work remotely within the U.S. • Ability to provide business travel as required

🏖️ Benefits

• Short-term incentive bonus eligibility set at 15% • Competitive pay • Comprehensive benefits for employees and their families • Growth, inclusion, and a supportive environment • Merit increases may be available