Full-Time
Principal Consultant
Digital Forensics and Incident Response
Updated on 8/17/2026
Surefire Cyber
51-200 employees
Incident response and cyber resilience services
No salary listed
Remote in USA
Remote
 IT & Security (1) |
|---|
Get referred to Surefire Cyber
See people who can refer or advise you
- Experience in cybersecurity, computer science, information technology, a related degree, industry certifications, or equivalent former professional experience as a senior or principal forensic consultant, cybersecurity consultant, or incident responder.
- Industry certifications or equivalent professional experience demonstrating mastery of digital forensics and incident response.
- Experience leading forensic workstreams and teams of 3–4 on complex investigations.
- Advanced proficiency with digital forensic artifacts and tools such as ELK, Axiom, EnCase, FTK (Forensic Toolkit), open-source tools, or comparable industry-standard tools.
- Professional experience using network analysis and intrusion detection tools in cybersecurity.
- In-depth knowledge of cybersecurity principles and best practices.
- Ability to solve complex problems with precision and attention to detail.
- Ability to work under pressure, manage competing priorities, and meet tight deadlines.
- Strong written and verbal communication skills for explaining complex technical information clearly.
- Ability to provide after-hours, on-call, and weekend rotational support for critical incidents.
- Contribute insights and support the team's knowledge growth.
- Lead incident response engagements and guide clients through the incident response lifecycle from detection to recovery.
- Conduct advanced forensic analysis to identify the scope and impact of security incidents, including malware analysis and reverse engineering when necessary.
- Independently manage investigations involving Business Email Compromise and ransomware engagements.
- Provide career development for a forensic team of 3–4 consultants and senior consultants through professional development, regular one-on-one conversations, and training guidance.
- Identify, articulate, and explain attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention efforts.
- Explain complex forensic findings to technical and non-technical stakeholders.
- Provide supporting evidence for written reports detailing incident findings and analysis.
- Review forensic reports and provide input and guidance to team members.
- Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.
- Lead research and development activities involving forensic tools, techniques, and methodologies.
- Contribute to internal processes and broader organizational initiatives.
- Provide after-hours, on-call, and weekend rotational support for critical incidents and continuous coverage.
Surefire Cyber provides incident response, pre-incident preparation, and post-incident recovery services to organizations dealing with cyber threats. It helps clients prepare through risk assessments and resilience planning, respond during a cyber attack to mitigate damage and stabilize operations, and recover afterward to restore normal functionality. Its approach combines crisis management, deep cyber experience, and a focus on critical thinking and empathy, all delivered with transparent pricing and clear communication. This makes it distinct from competitors who may not emphasize these values or price transparency as strongly, and it targets corporate, government, and other data-sensitive clients seeking robust cyber resilience. The company's goal is to help organizations effectively manage, withstand, and bounce back from cyber incidents with minimal downtime and clear, trustworthy guidance.
Company Size
51-200
Company Stage
Series A
Total Funding
$10M
Headquarters
Hanover, Maryland
Founded
2022
Get referred to Surefire Cyber
See people who can refer or advise you
Simplify's Take
What believers are saying
- Mar. 16, 2026 Cyber Insurance Awards finalist status strengthens buyer confidence and brand.
- Its claims-ready reporting directly reduces insurer and breach-counsel coordination friction during incidents.
- AI automation plus expert-led delivery promises faster response and higher margins than pure consulting.
What critics are saying
- Crowded DFIR market lets CrowdStrike, Mandiant, and Unit 42 compress pricing and talent.
- Insurance-driven workflow dependence exposes revenue concentration if carriers standardize around internal panels.
- AI platform execution failure would trap Surefire as a small services shop; scaling stalls by 2027.
What makes Surefire Cyber unique
- Feb. 9, 2026 platform unifies intake, forensics, restoration, claims, and intelligence.
- May 18, 2026 Admiral Michael S. Rogers added national-security credibility and insurance access.
- June 18, 2026 AI Advisory Board ties product design to insurers, brokers, and lawyers.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Retirement Plan
401(k) Company Match
Unlimited Paid Time Off
Remote Work Options
Paid Parental Leave
Professional Development Budget
Growth & Insights and Company News
6 month growth
↑ 1%1 year growth
↓ -1%2 year growth
↑ 2%Surefire Cyber launches AI Advisory Board to shape incident response platform. June 18, 2026 Surefire Cyber has formed an AI Advisory Board composed of leaders from the cyber insurance, brokerage and legal sectors to help guide the development of its AI-enabled incident response platform and align it with the operational needs of organizations managing cyber events. The New York-based digital forensics and incident response (DFIR) firm said the advisory board will provide strategic input as the company expands a platform designed to unify the insurance-driven cyber response process, connecting stakeholders across forensic investigations, restoration efforts, claims management and cyber intelligence workflows. The initiative comes as cyber incidents continue to grow in frequency, complexity and cost, placing increasing pressure on insurers, law firms, brokers and response providers to coordinate more efficiently. Surefire Cyber argues that while cyber threats have evolved rapidly, the operational infrastructure supporting incident response has remained fragmented, creating delays and inefficiencies throughout the claims and recovery process. "We are building a platform that changes how the industry experiences cyber incidents," said Billy Gouveia, Chief Executive Officer of Surefire Cyber. "We are applying automation and AI across the entire lifecycle, and we are doing it alongside the people who know what that has to look like to actually work. The AI Advisory Board is how we stay accountable to the people we serve." According to the company, the platform is being developed to provide real-time visibility, claims-ready intelligence and AI-powered insights throughout the lifecycle of a cyber incident. Rather than functioning solely as a communications tool, the system is intended to connect the operational, investigative and insurance-related components of incident response within a single environment. The advisory board will work directly with Surefire Cyber leadership and product teams, offering guidance on regulatory considerations, claims workflows, legal requirements and practical implementation challenges. Members will draw on their experience managing cyber claims, coordinating breach response efforts and advising clients during security incidents. To help oversee the initiative, Surefire Cyber has engaged Caroline McGlynn, Esq., to provide leadership and strategic guidance to the board. McGlynn brings more than 20 years of experience spanning litigation, consulting and cyber incident response. Her role will focus on governance and ensuring that platform development reflects the legal, operational and business realities faced by organizations responding to cyber events. The advisory board follows two other strategic initiatives announced by the company this year. In February 2026, Surefire Cyber unveiled its incident response platform, and in May it appointed Admiral (Ret.) Michael S. Rogers as a strategic advisor. Together, those moves reflect the company's broader effort to build technology and advisory capabilities aimed at modernizing cyber incident response. As insurers and enterprises increasingly seek ways to manage cyber risks more efficiently, artificial intelligence is becoming a growing area of investment across claims administration, forensic analysis and operational coordination. Surefire Cyber's approach focuses on integrating AI into existing response workflows while maintaining expert oversight and decision-making throughout the process. The company said the AI Advisory Board is intended to ensure its technology evolves in partnership with the stakeholders who rely on cyber response services every day. By incorporating direct feedback from insurance carriers, brokers and legal professionals, Surefire Cyber aims to develop tools that improve visibility, accelerate response times and streamline coordination during cyber incidents. Surefire Cyber provides digital forensics, incident response and cyber recovery services for organizations and insurers. The company's platform combines automation, cyber intelligence and response expertise to help clients investigate, manage and recover from cyber events while supporting insurance-driven response programs at scale.
Surefire Cyber, a digital forensics and incident response firm, has named Admiral (Ret.) Michael S. Rogers as a strategic adviser. Rogers previously served as Director of the National Security Agency and Commander of U.S. Cyber Command from 2014 to 2018, and currently sits on the board of cyber risk analytics firm CyberCube. During his 37-year naval career, Rogers helped transform U.S. Cyber Command into a unified combatant command. Since retiring, he has advocated for collaboration between insurers and enterprises on cyber risk mitigation strategies. In his new role, Rogers will advise on Surefire Cyber's growth strategy, bringing expertise in national security, artificial intelligence and the cyber insurance market. The company specialises in AI-powered incident response services for the insurance sector.
Surefire Cyber names Admiral (Ret.) Michael S. Rogers as a Strategic Advisor. Former NSA Director and Commander of U.S. Cyber Command to Strengthen Market Presence and Bring Unmatched Insight to Surefire Cyber's AI-Powered Incident Response New York, NY May 18, 2026 - Surefire Cyber, a leading digital forensics and incident response (DFIR) firm, today announced that Admiral (Ret.) Michael S. Rogers has joined the company as a Strategic Advisor. A retired four-star U.S. Navy Admiral, former Director of the National Security Agency (NSA), and former Commander of U.S. Cyber Command (USCYBERCOM), Admiral Rogers is one of the most respected and recognized figures in cybersecurity. His appointment brings a strategic perspective shaped by decades at the forefront of cyber defense and intelligence, including a deep understanding of the cyber threat landscape and the critical role the insurance industry plays in organizational resilience. From 2014 to 2018, Admiral Rogers served concurrently as NSA Director, USCYBERCOM Commander, and Chief of the Central Security Service, helping transform U.S. Cyber Command into a unified combatant command that promoted defend forward strategies. His 37-year naval career also included roles as Commander of U.S. Fleet Cyber Command and Director of Intelligence for the Joint Chiefs of Staff. Since retiring, he has served on the board of CyberCube, a leading cyber risk analytics firm for the insurance industry, where he has been a consistent voice on how insurers and enterprises must collaborate to build stronger cyber risk mitigation strategies. He has also spoken widely on artificial intelligence as both an emerging threat vector and an essential defensive capability. "The cyber threat environment has never been more complex, and the stakes for businesses have never been higher. Surefire Cyber is doing something genuinely different. The combination of expert-led judgment, AI-enabled speed, and claims-ready intelligence is exactly what the insurance ecosystem demands today and what the broader market will require tomorrow. I am looking forward to helping amplify their leadership and accelerate their impact in the market." Admiral (Ret.) Michael S. Rogers As a Strategic Advisor, Admiral Rogers will bring his singular vantage point on national security, AI, and the cyber insurance market to bear on Surefire Cyber's growth strategy. His experience operating at the highest levels of cyber defense, combined with his deep engagement with the insurance sector, gives him rare insight into what the market needs. That perspective will directly inform how Surefire Cyber strengthens its position as the trusted choice. "Admiral Rogers has spent his career at the intersection of cyber threat intelligence, national defense, and the evolving insurance ecosystem. His insight into where the market is headed and what it demands from a response partner is invaluable as we continue to build the infrastructure this industry has needed. Cyber incidents should be manageable events, not defining moments, and Admiral Rogers understands exactly what it takes to make that a reality." Billy Gouveia, Chief Executive Officer, Surefire Cyber Admiral Rogers' appointment follows Surefire Cyber's February 2026 announcement of significant advances to its incident response platform, the first system to unify the full insurance-driven response lifecycle from intake through invoice. Surefire Cyber is advancing how insurance carriers, law firms, and insureds experience cyber incidents, enabling them to plan, respond, and recover with greater confidence, reduced business interruption, and actionable intelligence. By integrating forensic investigation, restoration, claims coordination, and cyber intelligence into one connected system, the platform transforms incident response from isolated technical work into portfolio-level risk intelligence. Share the article. There has been significant discussion about how threat actors may use artificial intelligence, but far less visibility into how these techniques are actually appearing in real world attacks. May 13, 2026 Payouts King is an emerging ransomware group using social engineering, legitimate tools, and sustained pressure to drive payment, prioritizing access and persistence over technical complexity. April 30, 2026 The Gentlemen is a ransomware group that emerged in mid-2025, operating a double-extortion model that encrypts victim environments while exfiltrating sensitive data to increase ransom pressure. April 20, 2026
MISSOULA, Mont., Feb. 7, 2024 /PRNewswire/ -- LMG Security, an internationally recognized cybersecurity consulting firm, and Surefire Cyber, a cyber Digital Forensics and Incident Response (DFIR) provider, are pleased to announce a strategic partnership to deliver both proactive and response services to their clients. By partnering, customers of both organizations have access to industry-leading proactive cybersecurity services and solutions to prevent cyber threats, as well as tech-enabled incident response services that accelerate forensic results, improve communication, and reduce business disruption."We are excited to partner with Surefire Cyber," said Sherri Davidoff, CEO of LMG Security. "Their innovative incident response model is the perfect complement to LMG's proactive cybersecurity services," stated Davidoff. "Together, we can offer our clients a well-rounded cybersecurity program, including LMG's proactive penetration testing, compliance, and training as well as Surefire Cyber's swift and effective incident response capabilities.""I am thrilled to be working alongside Sherri and her team to help our clients," said Surefire Cyber CEO, Billy Gouveia. "By partnering with LMG Security, both of our firms' clients can better manage their cyber risk
Bermuda-based carrier Aspen Insurance Holdings has partnered with Surefire Cyber to launch Aspen Cyber Risk Services, a suite of services designed to enable its primary cyber insureds to address cybersecurity threats.