DFIR Team Lead (Cybersecurity)

TL;DR

DFIR Team Lead (Cybersecurity): Leading a team of incident response analysts to contain and resolve major cybersecurity issues with an accent on digital forensics and client delivery. Focus on coordinating high-stakes incident responses, mentoring junior analysts, and developing critical forensic documentation.

Location: Must be based in the US (McLean, VA), Remote/Hybrid

Salary: $112,800 – $257,000 per year

Company

A leading professional services firm providing high-level consulting and technical cybersecurity solutions to government and commercial clients.

What you will do

• Lead and inspire a team of skilled incident response analysts, fostering technical expertise and collaboration.
• Coordinate response efforts for major cybersecurity incidents to ensure rapid containment and resolution.
• Communicate critical status updates to stakeholders, including Cybersecurity leaders and legal counsel.
• Develop, maintain, and review comprehensive forensic documentation for all handled incidents.
• Provide thought leadership for program improvements and new cybersecurity initiatives.
• Mentor junior team members and guide them in the Digital Forensics and Incident Response (DFIR) domain.

Requirements

• 3+ years of experience in digital forensics or incident response.
• Proficiency with DFIR toolsets such as FTK, EnCase, XWF, and Axiom.
• Experience analyzing Microsoft Windows, Mac, and Linux systems.
• Ability to use scripted DFIR toolsets written in Python or PowerShell.
• Experience analyzing firewall, network traffic, IIS, Antivirus, and DNS logs.
• Ability to work after standard business hours, including evenings and weekends, and participate in an on-call rotation.

Nice to have

• Experience with cloud data forensics (AWS, Azure, or GCP).
• Knowledge of mobile device platforms (smartphones and tablets).
• Bachelor’s or Master's degree in a relevant field.
• Certifications such as CCE, EnCE, CFCE, CISSP, CISM, GCIA, GCFE, GCFA, GREM, or GNFA.

Culture & Benefits

• Comprehensive health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, and tuition assistance.
• Work-life programs and dependent care support.
• Recognition awards program for exceptional performance.
• People-first culture prioritizing collaboration in both virtual and in-person environments.