Principal DFIR Consultant

🕒 July 29

🏄 California – Remote

🏄 California – Remote

💵 $122.3k - $269.5k / year

⏰ Full Time

🔴 Lead

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 8%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tokio Marine HCC

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📦 Logistics

💼 Consulting

✈️ Travel

Logistics • Consulting • Travel

Tokio Marine HCC is a global specialty insurance and reinsurance group that underwrites more than 100 classes of specialty insurance across 180+ countries. The company offers a wide range of commercial products—including accident & health, aviation, casualty, cyber & tech, energy, marine, travel, crop, and transactional risk—serving brokers, enterprises, and program partners. With strong financial ratings (AM Best A++ / Fitch AA- / S&P A+) and a multi-billion dollar premium base, Tokio Marine HCC combines underwriting expertise, program management, and claims services as part of the Tokio Marine Group.

📋 Description

• Lead incident response activities during cyber security breaches including initial triage, threat assessment, containment, eradication, and recovery phases • Act as the “Incident Commander” for insureds or their representatives during cyber incidents providing clear communication, recovery direction, and/or updates on investigation progress • Conduct scoping calls with clients to understand the disruption, develop a roadmap to resolve the cyber security event, and provide initial triage to contain the threat • Communicate complex cybersecurity concepts internally and externally • Build strong insured relationships and maintain trust through effective communication and timely delivery of investigation results • Relying on extensive knowledge and advanced leadership skills, accountable for supporting recruitment and development of a high-performing DFIR team • Provide mentorship to a team that will grow with time and experience • Lead case teams, assign tasks, delegate responsibilities, and oversee quality control on all analysis and work products • Perform post-incident analysis to identify root causes and implement preventive measures to mitigate future risks.

🎯 Requirements

• Minimum 4 year / bachelor’s degree in cyber security, Computer Science, Information Technology related degree or relevant professional work experience • 5 years former professional experience in leading and managing DFIR team and managing active cybersecurity engagements, including incident response, digital forensics investigations and working with insureds / clients and legal counsel • Advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus • 2 years prior people management or team leadership roles • Proven track record of success in leading/building DFIR teams and managing complex cyber incidents • Experience in conducting security investigations in Linux and Windows environments • Understanding of cloud platforms and security considerations within AWS, Azure, Microsoft 365, and GCP • Knowledge of digital forensic artifacts and tools such as ELK, Axiom, Encase, X-Ways, SIFT, FTK, Volatility, or Open-Source tools • Experience in Digital Forensics, Network Forensics, Memory Forensics, and/or Malware Analysis • Scripting skills (PowerShell, Bash, Python, Go) • Experience with EDR solutions (Defender, SentinelOne, CrowdStrike) • Strong understanding of legal and regulatory frameworks related to cyber security investigations such as PCI, NIST CSF. • Excellent communication and presentation skills to clearly and concisely communicate complex technical findings to clients and stakeholders • Strong leadership abilities to motivate and mentor team members • Superior organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously • Knowledgeable of industry changes, legal updates, and technical developments related to applicable area of the Company's business to proactively respond to changing business environment • Advanced proficiency and experience using Microsoft Office package.

🏖️ Benefits

• subsidized medical, prescription, dental, vision and basic life and disability insurance • employee assistance program • paid parental leave • 401(k) plan with Company matching contributions • at least 20 days of PTO • 11 paid holidays • one paid volunteer day • two paid floating holidays