DFIR Team Lead (Cybersecurity)

Location: Remote, with the role located in McLean, Virginia, USA; occasional in-person work at a Booz Allen or customer facility may be required.

Salary: $112,800–$257,000 annualized USD

Company

hirify.global provides consulting and technology services, including cybersecurity and digital forensics capabilities.

What you will do

• Lead and mentor incident response analysts while fostering technical expertise, collaboration, and continuous learning.
• Lead incident response for major incidents and coordinate efforts to contain and resolve cybersecurity issues.
• Communicate incident status to cybersecurity and operations leaders, legal stakeholders, clients, and other required parties.
• Develop, maintain, and review critical incident documentation, case notes, and detailed technical reports.
• Provide technical leadership for program improvements and new DFIR initiatives.

Requirements

• 3+ years of experience in digital forensics or incident response.
• Experience analyzing Microsoft Windows and non-Windows systems, including Mac or Linux, using DFIR toolsets such as FTK, EnCase, XWF, and Axiom.
• Experience with scripted DFIR toolsets written in Python or PowerShell.
• Experience analyzing firewall, network traffic, IIS, antivirus, and DNS logs.
• Knowledge of forensic artifacts used to determine attack vectors, lateral movement, and data exfiltration.
• Ability to correlate events from multiple sources into timeline analyses, organize case notes, communicate with clients, and prepare detailed technical reports.
• Ability to work after standard business hours, including evenings and weekends, and participate in an on-call rotation.
• High school diploma or GED.

Nice to have

• Forensic analysis experience with cloud data from AWS, Azure, or GCP.
• Knowledge of mobile device platforms, including smartphones and tablets.
• Ability to prioritize work assignments independently.
• Bachelor’s degree preferred; master’s degree is a plus.
• DFIR or cybersecurity certifications such as CCE, EnCE, CFCE, CISSP, CISM, GCIA, GCFE, GCFA, GREM, or GNFA.

Culture & Benefits

• Full-time employees working at least 20 hours per week on a regular basis may participate in benefit programs; employees below the threshold receive select offerings.
• Health, life, disability, financial, and retirement benefits, plus paid leave and dependent care support.
• Professional development, tuition assistance, work-life programs, and recognition awards.
• Virtual employees are generally expected to keep cameras on during meetings.
• Responsible AI use is supported, but AI assistance during interviews is prohibited unless explicitly permitted.

Hiring process

• Identity verification using advanced biometrics and artificial intelligence is required; candidates must be on camera during interviews and assessments.
• AI or other tools may not be used to assist with interview responses unless explicit permission is provided.