Senior Digital Forensics and Incident Response (DFIR)
Core
Lead complex cyber investigations, strengthen enterprise resilience, and guide security teams through critical incidents across global environments.
Role type
Senior IC Digital Forensics and Incident Response (DFIR) professional
Builds
Incident response playbooks, forensic evidence, executive briefings, and post-incident reviews
Domain
Cybersecurity / Digital Forensics / Incident Response
Required skills
Advanced threat hunting, digital forensics triage, incident response leadership, containment and eradication strategies, executive communication, cloud security investigation, SIEM/EDR platform usage, forensic tool proficiency (FTK, Encase, X-Ways, Magnet Axiom, SIFT)
Preferred skills
AI-assisted workflow adoption, detection engineering, log analytics, strategic security advisory
Technologies
Splunk, Microsoft Defender, CrowdStrike Falcon, ServiceNow SIR, AWS, Azure, Microsoft 365, Windows, Linux, macOS
Responsibilities
Lead enterprise incident response and cyber crisis engagements from detection through recovery; Direct host, network, cloud, identity, and SaaS investigations; Perform advanced threat hunting and compromise assessments; Develop containment, eradication, and remediation strategies; Produce executive briefings and post-incident reviews; Partner with legal, compliance, privacy, audit, and external stakeholders; Support the 24/7 on-call rotation
Seniority
Senior, hands-on IC with strategic advisory capabilities
