Senior Incident Response DFIR Consultant – Engagement Lead

Job not on LinkedIn

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $100.2k - $164.1k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zurich Insurance

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

⚖️ Legal

Consulting • Healthcare • Legal

Zurich Insurance is a global insurance and risk-management company offering a broad range of products and services including commercial and personal property & casualty insurance, life and critical-illness cover, pensions and retirement solutions, savings and investment products, claims and risk advisory, and specialty offerings such as microinsurance and travel coverage. The company also runs investment funds, sustainability and climate-focused initiatives, innovation and technology programs, and a foundation for community and environmental projects. Zurich serves both individual consumers and corporate clients across many countries, emphasizing governance, ESG reporting, digital innovation, and resilience.

📋 Description

• Lead incident response engagements for external clients • Conduct digital forensics investigations, malware analysis, and threat actor attribution • Provide 24/7 on-call incident response, remotely connecting to contain active threats, preserve evidence, and minimize disruption • Examine compromised systems, networks, and cloud environments using industry-standard tools and methodologies • Deliver executive-level briefings and written reports with business impact assessments and recommendations • Coordinate incident response with IT teams, legal counsel, insurance carriers, law enforcement, and executive leadership • Provide guidance on ransomware negotiations, business email compromise, insider threat, and advanced persistent threat incidents • Mentor junior consultants and analysts and provide quality assurance • Maintain case documentation, time tracking, and engagement status reporting • Partner with insurance brokers, managed service providers, and law firms on cyber insurance claims and breach response • Research emerging threats, attack techniques, and forensic methodologies • Contribute to thought leadership through blog posts, conference presentations, and client education materials • Develop scopes of work and cost estimates • Identify opportunities for expanded client engagements • Support business development through client presentations, capability demonstrations, and proposal development • Ensure deliverables meet quality standards and agreed timelines and budgets • Travel as required

🎯 Requirements

• Bachelor’s degree and 5 or more years of experience in the Cyber Security domain; OR Zurich Cybersecurity Technician Apprentice, including Cyber Security Certification and 6 or more years of experience in the Cyber Security domain; OR High School Diploma or Equivalent and 7 or more years of experience in the Cyber Security domain • Advanced proficiency in Digital Forensics & Incident Response • Intermediate proficiency in Threat Intelligence & Malware Analysis • Advanced proficiency in Client Communication & Stakeholder Management • Advanced proficiency in Windows/Linux Operating System Forensics • Intermediate proficiency in Network Forensics & Log Analysis • Intermediate proficiency in Cloud Security (Azure/AWS/M365) • Advanced proficiency in forensic tools including EnCase, FTK, X-Ways, Volatility, and Binalyze • Advanced proficiency in Ransomware & Business Email Compromise (BEC) Investigations • Advanced proficiency in Report Writing & Executive Communication • Intermediate proficiency in Project Management • Threat Actor Communications Experience • Ability to provide 24/7 on-call incident response services • Willingness to work remotely within the U.S. and travel up to 5% as required • Employment sponsorship is not offered

🏖️ Benefits

• Short-term incentive bonus eligibility set at 15% • Competitive pay • Comprehensive benefits for employees and their families • Growth, inclusion, and a supportive environment • Potential merit increases