Principal Engagement Lead - Digital Forensic and Incident Response
About the job
- Experience in cybersecurity, computer science, information technology, a related degree, or relevant professional work experience in these disciplines.
- Professional experience leading and managing active cybersecurity engagements, including incident response, digital forensics investigations, and interaction with clients, legal counsel, and cyber insurers.
- Experience conducting security investigations in Linux and Windows environments.
- Understanding of cloud platforms and security considerations within Amazon Web Services, Azure, and Google Cloud Platform.
- Knowledge of digital forensic artifacts and tools such as ELK, Axiom, EnCase, FTK, Volatility, or open-source tools.
- Proficiency in conducting forensic analysis, threat assessments, and post-incident reviews.
- Ability to provide after-hours, on-call, and weekend rotational support as required to address critical incidents and maintain continuous coverage.
- Lead and oversee active client-facing incident response engagements, working with team members to guide clients through the incident response lifecycle from detection to recovery.
- Conduct scoping calls with clients to define the incident scope, objectives, and expectations of each engagement.
- Coordinate resources and expertise with other Engagement Leads and Forensic Consultants on client matters.
- Build and cultivate client relationships based on trust, open communication, and collaborative problem-solving.
- Provide solutions that address immediate client challenges and achieve long-term security goals.
- Communicate advanced cybersecurity concepts internally and externally and produce clear verbal and written reports detailing incident findings and analysis.
- Share knowledge with team members and stay current on industry trends, emerging threats, and best practices.
- Provide after-hours, on-call, and weekend rotational support as required to address critical incidents and maintain continuous coverage.
- Willingness to learn from the team, grow cybersecurity knowledge, and teach colleagues.
- Expertise across every listed cybersecurity, digital forensics, incident response, and cloud-security area is not required; candidates are encouraged to apply while developing additional mastery.
About the company
Surefire Cyber provides incident response, pre-incident preparation, and post-incident recovery services to organizations dealing with cyber threats. It helps clients prepare through risk assessments and resilience planning, respond during a cyber attack to mitigate damage and stabilize operations, and recover afterward to restore normal functionality. Its approach combines crisis management, deep cyber experience, and a focus on critical thinking and empathy, all delivered with transparent pricing and clear communication. This makes it distinct from competitors who may not emphasize these values or price transparency as strongly, and it targets corporate, government, and other data-sensitive clients seeking robust cyber resilience. The company's goal is to help organizations effectively manage, withstand, and bounce back from cyber incidents with minimal downtime and clear, trustworthy guidance.
Company Size
51-200
Company Stage
Series A
Total Funding
$10M
Headquarters
Elkridge, Maryland
Founded
2022
Get referred to Surefire Cyber
See people who can refer or advise you
Simplify's Take
What believers are saying
- June 2026 AI Advisory Board ties product design directly to insurers, lawyers, and brokers.
- Greenhouse showed eight open roles on September 7, 2026, signaling active scaling.
- Recent advisor additions and partnerships strengthen trust during ransomware incidents and claims-heavy breaches.
What critics are saying
- Crowded DFIR rivals like Mandiant and Kroll compress margins and steal enterprise clients by 2027.
- The February 2026 platform promise risks becoming expensive workflow software without repeatable product revenue.
- A carrier or broker shift away from Surefire’s ecosystem would undercut its core distribution engine.
What makes Surefire Cyber unique
- Surefire Cyber unifies intake, forensics, restoration, claims, and intelligence in one workflow.
- Billy Gouveia and Admiral Michael S. Rogers give the firm rare incident-response credibility.
- Its insurance-first model targets brokers, carriers, and breach counsel, not generic corporate buyers.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Unlimited Paid Time Off
- Remote Work Options
- Paid Parental Leave
- Professional Development Budget