DFIR Engagement Manager Full Time

Responsibilities

• Engage in incident response tasks with legal, client, and technical teams
• Collect forensic artifacts and images from affected systems
• Perform Windows/Unix/Linux forensics and network forensics
• Apply mitigation strategies to remediate identified threats
• Analyze artifacts for indicators of compromise (IoCs) and malicious activity
• Review logs from host systems and appliances for suspicious activities
• Collect forensic disk and memory images from endpoints and servers
• Perform forensic analysis of physical systems, virtual machines, and network data
• Understand incident lifecycle and cyber-kill-chain
• Maintain knowledge on emerging threats and vulnerabilities
• Analyze files for IOCs using various techniques
• Conduct limited threat research based on collected IOCs
• Understand obfuscation techniques and lateral movement strategies
• Collaborate and share information within and across teams
• Write detailed reports and summarize findings clearly

Requirements

• 3+ years of experience in digital forensics, incident response, or similar
• 1+ years managing highly skilled DFIR team members
• Strong knowledge of Windows and Unix/Linux operating systems
• Expertise in threat hunting, network forensics, and EDR/EPP technologies
• Skilled in forensic acquisition and analysis of physical and virtual systems
• Advanced understanding of networking, routing, and firewall operations
• Understanding of business email compromise (BEC) cases and techniques
• Industry certifications such as MCFE, ENCE, ACE, GCFA, GCIH, GNFA, GCFE a plus

Benefits

• Estimated base pay range: $150,000-$180,000 per year
• Base salary based on market data, location, internal equitability, and skills
• Nationwide work location in the USA