Surefire Cyber Inc.

Consultant

• Lead end-to-end recovery operations for complex cyber incidents, including ransomware outbreaks, large-scale breaches, and targeted compromises
• Architect and manage technical remediation plans across hybrid infrastructure (on-prem, cloud, and SaaS), including user recovery, server rebuilds, reconfiguration, and hardening
• Oversee restoration of identity services (Active Directory, Azure AD), messaging systems (Exchange, M365), VPNs, firewalls, MFA, and enterprise backup solutions
• Advise client executives (CIOs, CISOs, legal, insurers) on remediation strategy, recovery timelines, and long-term resilience improvements
• Coordinate recovery workstreams across DFIR, IT, legal, and insurance stakeholders, ensuring alignment and technical integrity
• Act as technical escalation point during recovery engagements, solving roadblocks with precision and speed
• Mentor senior and junior consultants on real-time client work and long-term development, including technical coaching, feedback, and project guidance
• Document and review client-facing technical reports, timelines, and lessons learned to ensure completeness and clarity
• Contribute to the evolution of Surefire Cyber’s recovery methodologies, including internal tooling, knowledge bases, and training paths
• Lead or support proactive services including tabletop exercises, remediation readiness assessments, and executive advisory engagements
• Participate in after-hours response rotations during major incident events (on-call availability expected)

Principal Consultant, Restoration and Remediation

• Represent Surefire Cyber as a skilled technical forensic and consulting expert for clients across diverse industries during active incident response engagements.
• Leverage extensive experience and technical skills to play a pivotal role in detecting and analyzing intrusions, offering clear guidance to clients navigating high-pressure response situations, and providing after-hours support as needed.
• Demonstrate genuine curiosity, a commitment to continuous learning, and contribute valuable insights to support the team's knowledge growth.
• Forensically lead incident response engagements, working with other team members to guide clients through the entire incident response lifecycle from detection to recovery.
• Conduct advanced forensic analysis to identify the scope and impact of security incidents meticulously and precisely, including malware analysis and reverse engineering when necessary.
• Independently manage investigations ranging in size and complexity such as Business Email Compromises and Ransomware engagements.
• Provide career development for a Forensic team consisting of 3-4 Consultants/Senior Consultants, by investing in their professional development conducting regular one-on-one conversations and providing guidance and recommendations on training opportunities.
• Identify, articulate, and explain attack vectors, threat tactics, and attacker techniques to guide mitigation and prevention efforts.
• Convey complex forensic findings to technical and non-technical stakeholders clearly and understandably.
• Provide comprehensive supporting evidence for written reports detailing incident findings, and analysis.
• Review, provide well thought out input, and provide guidance to other team members on forensic reports.
• Collaborate with internal teams, external partners, and clients to refine and document incident response processes and best practices.
• Spearhead research and development activities to stay up to date with the latest forensic tools, techniques, and methodologies.
• Contribute to the development of internal processes and support broader organizational initiatives.
• Provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.

Principal Consultant, Digital Forensic and Incident Response

Principal

• Lead and oversee active client-facing incident response engagements, working closely with other team members to guide clients through the entire incident response lifecycle from detection to recovery.
• Conduct scoping calls with clients to define the incident scope, objectives, and expectations of each engagement.
• Work closely with other Engagement Leads and Forensic Consultants to ensure effective coordination of resources and expertise on client matters.
• Build and cultivate strong client relationships based on trust, open communication, and collaborative problem-solving.
• Provide well-informed solutions that go beyond immediate client challenges to achieve long-term security goals.
• Communicate advanced cybersecurity concepts both internally and externally and produce clear and concise verbal and written reports detailing incident findings, and analysis.
• Actively knowledge share with team members cultivating a culture of continuous learning, and stay up to date on industry trends, emerging threats, and best practices.
• Provide after-hours (on-call/weekend rotational) support as required to address critical incidents and maintain continuous coverage.

Principal Engagement Lead

Full-stack Engineer

• Build greenfield Python applications using agentic methods, including AI agent workflows with tools such as Claude Code, LangChain, or equivalent frameworks
• Architect the scaffold layer that coordinates multi-agent pipelines, including role separation, context injection, and output validation
• Integrate agentic systems with the GitHub-based knowledge store that serves as the org-wide context layer for engineering work
• Evaluate and adopt new agentic tooling and LLM capabilities as they emerge, bringing structured recommendations to the team
• Design and implement services, RESTful and event-driven APIs, and data access layers across Python backends and React frontends
• Contribute to integration between internal services and external platforms, including third-party APIs relevant to IR workflows and business operations
• Write code that other engineers can read, extend, and trust in production
• Own and operate AWS infrastructure across all environments (dev, staging, production), including Kubernetes, Terraform, and CI/CD via GitHub Actions. Engineers here own what they ship, from code to infrastructure — that’s a feature, not a burden
• Build monitoring, alerting, and observability so production issues surface early and resolve fast
• Ensure infrastructure aligns with Surefire’s security and compliance requirements. We’re a cybersecurity company; security is a design constraint, not a review step
• Identify weaknesses in the current architecture and propose pragmatic improvements with clear rationale.

Principal Consultant, Restoration and Remediation

Principal Consultant, Digital Forensic and Incident Response

Principal Engagement Lead

Senior Software Engineer – AI Software, Operations