Cyber Defense DFIR Manager
Core
Own incident response and digital forensics as a dedicated discipline, maintaining and maturing the DFIR function across a multi-entity ecosystem including banking, quantitative research, and advanced technology ventures.
Role type
Senior IC Cyber Defense DFIR Manager
Builds
Incident response program, forensic tooling, evidence-handling standards, and team capability
Domain
Cybersecurity / Digital Forensics / Incident Response
Required skills
Incident response management, Digital forensics (host/network/cloud/mobile/memory), Microsoft 365/Entra forensics, Forensic reporting, Legal hold/eDiscovery, Team leadership, Tabletop exercises, AI/automation evaluation, Threat intelligence integration
Preferred skills
None stated
Technologies
AWS, Azure, Kubernetes, Microsoft 365, Entra, Purview eDiscovery, Graph API, Write-blockers
Responsibilities
Maintain enterprise and entity-specific incident response plans and playbooks; Lead forensic investigations across host, network, cloud, mobile, and memory; Build and maintain forensic lab infrastructure; Produce defensible forensic reports for legal/regulatory use; Design and run tabletop exercises; Serve as incident commander for significant events; Manage and develop the DFIR team; Integrate threat intelligence and AI/automation into workflows
Seniority
Senior, hands-on IC with management responsibilities
