Principal DFIR Consultant

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $122.3k - $269.5k / year

⏰ Full Time

🔴 Lead

💼 Consultant

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tokio Marine HCC

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📦 Logistics

💼 Consulting

✈️ Travel

Logistics • Consulting • Travel

Tokio Marine HCC is a global specialty insurance and reinsurance group that underwrites more than 100 classes of specialty insurance across 180+ countries. The company offers a wide range of commercial products—including accident & health, aviation, casualty, cyber & tech, energy, marine, travel, crop, and transactional risk—serving brokers, enterprises, and program partners. With strong financial ratings (AM Best A++ / Fitch AA- / S&P A+) and a multi-billion dollar premium base, Tokio Marine HCC combines underwriting expertise, program management, and claims services as part of the Tokio Marine Group.

📋 Description

• Support recruitment and development of a high-performing DFIR team • Develop and maintain DFIR operating procedures and best practices • Build and maintain insured/carrier relationships • Mentor a growing DFIR team and foster continuous learning • Act as Incident Commander during cyber incidents • Conduct client scoping calls, develop resolution roadmaps, and provide initial threat triage • Tailor response strategies to business risks and compliance requirements • Communicate complex cybersecurity concepts internally and externally • Lead incident response through triage, threat assessment, containment, eradication, and recovery • Lead case teams, assign tasks, delegate responsibilities, and oversee quality control • Develop and maintain incident response plans • Conduct post-incident analysis, identify root causes, and implement preventive measures • Track emerging cyber threats, Tactics Techniques and Procedures, and Indicators of Compromise • Provide expert guidance on digital forensics methodologies, evidence collection, analysis, and reporting • Conduct complex investigations of system logs, network traffic, and endpoint data • Identify new business opportunities and expand DFIR service offerings • Contribute to cybersecurity strategy, pricing models, service packages, and marketing initiatives • Collaborate with TMHCC-CPLG security teams to provide holistic cybersecurity solutions • Develop organizational plans, coordinate resources, communicate results, write reports or contractual documents, and present briefings • Comply with corporate policies and procedures • Develop innovative ways to improve financials

🎯 Requirements

• Minimum 4 year / bachelor’s degree in cyber security, Computer Science, Information Technology related degree or relevant professional work experience • 5 years former professional experience in leading and managing DFIR team and managing active cybersecurity engagements, including incident response, digital forensics investigations and working with insureds / clients and legal counsel • 2 years prior people management or team leadership roles • Proven track record of success in leading/building DFIR teams and managing complex cyber incidents • Experience conducting security investigations in Linux and Windows environments • Understanding of cloud platforms and security considerations within AWS, Azure, Microsoft 365, and GCP • Knowledge of digital forensic artifacts and tools such as ELK, Axiom, Encase, X-Ways, SIFT, FTK, Volatility, or open-source tools • Experience in Digital Forensics, Network Forensics, Memory Forensics, and/or Malware Analysis • Scripting skills in PowerShell, Bash, Python, and Go • Experience with EDR solutions including Defender, SentinelOne, and CrowdStrike • Strong understanding of legal and regulatory frameworks related to cybersecurity investigations such as PCI and NIST CSF • Excellent communication and presentation skills • Strong leadership abilities to motivate and mentor team members • Superior organizational and analytical skills; ability to manage multiple tasks simultaneously • Knowledge of industry changes, legal updates, and technical developments related to the Company’s business • Advanced proficiency and experience using Microsoft Office, including Excel, Access, PowerPoint, and Word • Ability to work overtime when required • Must be able to remain stationary for extended periods, move up to 10 pounds, operate a computer and other devices, and read a computer screen • Occasional travel up to 10% of time

🏖️ Benefits

• Competitive compensation • Subsidized medical, prescription, dental, vision, basic life and disability insurance • Employee assistance program • Paid parental leave • 401(k) plan with Company matching contributions • Educational/loan assistance • At least 20 days of PTO, prorated for the current year based on date of hire, and/or paid sick leave (subject to local and state laws) • Approximately 11 paid holidays • One paid volunteer day • Two paid floating holidays • Professional growth opportunities • Global organization • Occasional travel up to 10% of time