Principal Engagement Lead (Remote)
Core
Lead and oversee active client-facing digital forensics and incident response (DFIR) engagements, guiding clients through the incident lifecycle from detection to recovery.
Role type
Principal Engagement Lead (DFIR)
Builds
Incident response services for clients, cyber insurers, and legal counsel
Domain
Cybersecurity / Digital Forensics / Incident Response
Deliverable
client delivery
Required skills
Leading cybersecurity engagements, coordinating incident response, managing external stakeholders (insurers/legal), conducting security investigations in Linux/Windows, understanding cloud security (AWS/Azure/GCP), digital forensic analysis, threat assessments, post-incident reviews
Preferred skills
Knowledge of forensic tools (ELK, Axiom, Encase, FTK, Volatility), after-hours on-call support, knowledge sharing
Technologies
ELK, Axiom, Encase, FTK, Volatility, Linux, Windows, AWS, Azure, GCP
Responsibilities
Lead active DFIR engagements, conduct scoping calls, coordinate resources with team members, build client relationships, communicate findings and analysis, provide after-hours support
Seniority
Principal, hands-on IC with leadership responsibilities