---
title: 'Principal Consultant: DFIR at Cyderes'
canonical: 'https://feeny.ai/job/principal-consultant-dfir-cyderes-united-states-f8z0hvb7hmnr'
type: 'job'
last_seen: '2026-10-14'
---

# Principal Consultant: DFIR at Cyderes

- **Company:** Cyderes
- **Location:** United States
- **Compensation:** $175k–$190k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-10-06
- **Last confirmed live:** 2026-10-14
- **Apply:** https://jobs.lever.co/cyderes/2ec6592c-fb1e-4d91-af9c-9f9d8a5b64c1

## Job description

We Help the World Be Everyday Ready™ Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. 🏆 Great Place to Work® Certified™

About the Role: The Principal Incident Response Consultant will respond to our customer's major information security incidents, as the lead responder or incident handler. Drawing additional resources from our technical consulting teams, the Principal will build and lead teams for the purpose of responding to and remediating active client threats. As a primary interface to customers in crisis, the Principal will have excellent communication and organizational skills, ensuring the efficient and smooth handling of incidents. The Principal will be highly skilled in collaboration.

## Responsibilities

- Act as a lead responder on high profile and sensitive customer engagements.
- Performing incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation
- Be involved in the full incident response lifecycle, from preparation for information security incidents, through detecting, managing, and resolving ongoing incidents, and finally reporting on those incidents and identifying improvements and lessons learned.
- Collect, triage, and analyze forensic artifacts from client networks or devices in support of incident response investigations
- Utilize various EDRs or log collection platforms to conduct large-scale investigations and examine endpoint and network-based sources of evidence.
- Communicate with customer in a clear and precise manner throughout all phases of an incident, including verbal and written reports.
- Assist with developing, operating, and continuously improving the Cyderes Incident Response services.
- Train, develop, coach, and supervise junior and ad-hoc responders.

## Requirements

- Minimum of 5 years of experience in professional services or information security field with at least 3 of those years in Incident Response
- Holds an industry accepted certification validating digital forensics or incident response capabilities: GCIH, GCFA, GCFE, CFCE, GREM, EnCE, CCE, or similar
- Experience communicating complex technical topics to both technical and non-technical audiences
- Experience coordinating an incident and/or leading a team during an incident
- Experience investigating Windows, Linux, MacOS, and cloud environments
- Demonstrated experience and competence in endpoint forensics, memory forensics, network forensics, and malware analysis, with specialized knowledge in at least one of those fields using tools such as Axiom, FTK, X-Ways, etc.
- Experience identifying indicators of compromise and threat actor activity using a hypothesis-driven approach to uncover connections and correlations in data
- Applied knowledge of the Incident Response Lifecycle, the Cyber Kill Chain, and the MITRE ATT&CK Framework.
- Strong client facing communication (report issues to customer in a timely manner, demonstrate expertise of the overall business unit and command of the incident, develop presentations to highlight results and solutions, etc.)
- Bachelor's degree in relevant discipline
- Experience working with network and security technologies to include Elasticsearch, data analytic platforms, endpoint tools, network technologies, and SIEMs
- Proficiency with common programming or scripting languages such as Python and PowerShell
- Ability to preserve host-based and network evidence in an industry accepted and forensically sound manner
- Experience with project management to bring about the successful completion of specific project goals and objectives
- Ability to learn new technology and concepts quickly
- Effective in collaboration with teams in remote locations

The following will be considered an asset:

- Certifications such as CISSP, OSCP, ITIL, COBiT, or SABSA
- Working knowledge of NIST SP800-61r2 and ISO 27035
- Knowledge of ISO information security standard families, particularly ISO 27001 and 27002

WHY CYDERES? Benefits that go beyond the basics, we support our people so they can do their best work. ✔ Medical Insurance - Employee + dependents covered ✔ Life Insurance - Protection for what matters most ✔ Retirement Match Program - We invest in your future ✔ Hybrid Work Model - 2–3 days in office ✔ Maternity & Paternity Leave - Time for the moments that matter ✔ Paid Time Off - PTO + sick & casual leave ✔ Bereavement & Volunteer Time - Give back to your community ✔ Professional Development - Reimbursement program ✔ LinkedIn L&D Platform - Thousands of courses at your fingertips ✔ Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.

## About Cyderes

## Company Overview
- **One-liner**: Cyderes is a global cybersecurity partner providing identity-centric managed detection and response, exposure management, and cloud defense powered by an AI-driven entity fabric called Meridian.
- **Entity Type**: Private (backed by private equity; not publicly traded)
- **Headquarters**: Kansas City, Missouri, United States (with additional offices in Toronto, Canada; Orlando, United States; Reading, United Kingdom; Bengaluru, India)
- **Founded**: 2003 (originally as Herjavec Group and Fishtech, merged to form Cyderes)
- **Founders**: Not publicly listed for the merged entity; the company was born from Herjavec Group (founded by Robert Herjavec) and Fishtech (founded by Chris Schueler). Current CEO is Chris Schueler.

## Core Business
- **Primary industry**: Cybersecurity – specifically Managed Detection & Response (MDR), Identity & Access Management (IAM), Exposure Management, and Cloud Defense.
- **Target customers**: B2B – mid-market to enterprise organizations, including the world’s largest retailer and three of the top 10 North American banks.
- **Mission / purpose**: “Arm organizations with the people, platforms, and perspective to be ‘everyday ready’” – helping clients predict, identify, and stop threats.

## Products & Services
- **Meridian (Entity Fabric)**: Proprietary AI-powered platform that connects identities, assets, access relationships, and exposures to provide full environmental context for security operations.
- **Identity & Access Management (IAM)**: Services including Identity Governance and Access (IGA), Privileged Access Management (PAM), and Identity Threat Detection and Response (ITDR).
- **Managed Detection & Response (MDR)**: 24/7 monitoring, threat detection, investigation, containment, and incident response.
- **Exposure Management**: Attack surface discovery, vulnerability prioritization, exposure validation, and remediation guidance.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company).
- **Key Metric**: Annual revenue estimated at $200M (per LinkedIn), with 800+ dedicated security professionals and 5 global 24/7 Security Operations Centers.
- **Notable Investors/Partners**: Not specified in search results, but the company was formed from two award-winning firms (Herjavec Group and Fishtech) and has top technology partners.
- **Growth Signals**: 720+ employees (LinkedIn) with +7123.1% year-over-year headcount growth (likely reflecting merger); presence across 9 countries; serves major clients (largest retailer, top banks); global expansion with SOCs in North America, UK, and India.

## Competitive Advantages
- **Meridian Entity Fabric**: Differentiator – provides shared context across identity, threat, and exposure, enabling AI-driven decisions that reflect real risk, not just fragmented signals.
- **Scale and Expertise**: 800+ security professionals, 250+ security engineers, 100+ unique cyber certifications, 5 global SOCs.
- **Heritage**: Built from two established, award-winning cybersecurity companies (Herjavec Group and Fishtech) with decades of combined experience.

## Strategic Focus
- **Five strategic priorities**: People excellence, client success, innovative edge, market expansion, and global strategy.
- **Investment in AI**: Agentic AI grounded in Meridian to enhance decision-making and operational efficiency.
- **Expansion**: Growing global footprint (offices in Toronto, Kansas City, Orlando, Reading, Bengaluru) and targeting enterprise clients across verticals.

## Why Work Here
- **Culture**: Emphasizes a culture of trust, innovation, learning, and impact. Values include stopping threats with a global team that is “serious about solving complex problems.”
- **Work policy**: Hybrid & remote work options, flexible work schedules, volunteer time off.
- **Compensation & benefits**: Competitive pay, paid parental leave, family medical leave, company equity, employee stock purchase plan, diversity-based Employee Resource Groups, healthcare benefits.
- **Engineering culture**: Opportunity to work with cutting-edge cybersecurity tech (Meridian, Agentic AI) alongside seasoned operators and 100+ certified experts.
- **Growth**: Rapidly scaling company with global presence and strong client roster offers career advancement potential.

## Sources
1. [cyderes.com/careers](https://www.cyderes.com/company/careers)
2. [cyderes.com/about](https://www.cyderes.com/company/about)
3. [builtin.com](https://builtin.com/company/cyderes-cyderescom)
4. [cyderes.com](https://www.cyderes.com/)
5. [linkedin.com](https://ca.linkedin.com/company/cyderes)

## Other roles at Cyderes

- [Ping Engineer](https://feeny.ai/job/ping-engineer-cyderes-canada-r045vxfcspaq) — Canada
- [Security Analyst II: Gaurdian](https://feeny.ai/job/security-analyst-ii-gaurdian-cyderes-united-states-4c2s3x6msxg6) — United States
- [Security Analyst II](https://feeny.ai/job/security-analyst-ii-cyderes-united-states-3s04qvgf9v59) — United States
- [Senior Security Analyst](https://feeny.ai/job/senior-security-analyst-cyderes-bengaluru-jvahkavq5vm5) — Bengaluru, India
- [Senior Security Analyst](https://feeny.ai/job/senior-security-analyst-cyderes-bengaluru-vwwdm2bykfq0) — Bengaluru, India
- [Consultant I - PingFederate](https://feeny.ai/job/consultant-i-pingfederate-cyderes-bengaluru-2nehs833a9j7) — Bengaluru, India
- [Lead Consultant, PingFederate](https://feeny.ai/job/lead-consultant-pingfederate-cyderes-bengaluru-ppcy7j8yhgyb) — Bengaluru, India
- [Security Engineer, CyberArk](https://feeny.ai/job/security-engineer-cyberark-cyderes-bengaluru-e7byn1mnr7mn) — Bengaluru, India
- [Senior Manager, Platform Security & Consulting Operations](https://feeny.ai/job/senior-manager-platform-security-consulting-operations-cyderes-bengaluru-ykktjavnk2nj) — Bengaluru, India
- [Security Consultant, Operational Technology](https://feeny.ai/job/security-consultant-operational-technology-cyderes-bengaluru-zx9kqhnty6xd) — Bengaluru, India