DFIR Team Lead

Location: McLean, Virginia, USA; remote work is available, with occasional in-person work at a Booz Allen or customer facility possible.

Salary: $112,800–$257,000 annualized USD.

Company

hirify.global provides cybersecurity and related professional services.

What you will do

• Lead and mentor incident response analysts while fostering technical expertise, collaboration, and continuous learning in DFIR.
• Lead incident response for major incidents and coordinate efforts to contain and resolve cybersecurity issues.
• Communicate incident status to cybersecurity and operations leaders, legal stakeholders, clients, and other required parties.
• Develop, maintain, and review critical incident documentation, case notes, technical reports, and timeline analyses.
• Provide thought leadership for program improvements and new initiatives.

Requirements

• At least 3 years of experience in digital forensics or incident response.
• Experience analyzing Microsoft Windows and non-Windows systems, including Mac or Linux, using DFIR toolsets such as FTK, EnCase, XWF, and Axiom.
• Experience with scripted DFIR toolsets written in Python or PowerShell.
• Experience analyzing firewall, network traffic, IIS, antivirus, and DNS logs.
• Knowledge of common forensic artifacts used to determine attack vectors, lateral movement, and data exfiltration.
• Ability to correlate events from multiple sources to create timeline analyses.
• Ability to organize case notes and communicate verbally and in writing with clients.
• Ability to prepare detailed technical reports.
• Ability to work outside standard business hours, including evenings and weekends, and participate in an on-call rotation.
• High school diploma or GED.

Nice to have

• Experience forensically analyzing cloud data in AWS, Azure, or GCP.
• Knowledge of mobile device platforms, including smartphones and tablets.
• Ability to prioritize work assignments without guidance.
• Bachelor’s degree preferred; a master’s degree is a plus.
• DFIR or cybersecurity certification such as CCE, EnCE, CFCE, CISSP, CISM, GCIA, GCFE, GCFA, GREM, or GNFA.

Culture & Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care support.
• Recognition awards for exceptional performance and demonstration of company values.
• Remote employees are generally expected to keep cameras on during meetings and may occasionally work at a Booz Allen or customer facility.
• Full-time and part-time employees working at least 20 hours per week on a regular basis may participate in benefit programs, subject to eligibility rules.

Hiring process

• Identity verification uses advanced biometrics and artificial intelligence; candidates are expected to be on camera during interviews and assessments.
• Use of artificial intelligence or other tools to assist with interview responses is prohibited unless explicitly permitted.