Job Details

Overview

A Global investigations firm is currently looking to add an Associate Director of Digital Forensics and Incident Response to their team. This organization works with financial institutions, Fortune 500 companies, law institutions and more.

Responsibilities

The Associate Director of DFIR will lead the organization's Digital Forensics and Incident Response function, overseeing complex security investigations, major incident response operations, threat hunting, forensic analysis, and strategic response planning. This role will be instrumental in shaping the organization's cyber resilience, managing a skilled DFIR team, and coordinating responses to advanced persistent threats (APTs), data breaches, and insider threats.

• Lead the DFIR function and manage the DFIR team, including analysts, responders, and forensic investigators.


• Define and maintain the DFIR strategic roadmap aligned with enterprise security goals.


• Oversee and direct response to security incidents across cloud, on-premises, and hybrid environments.


• Direct forensic collection, analysis, and preservation of digital evidence using industry-standard tools.


• Oversee investigations into internal misconduct, IP theft, fraud, and external attacks.

What you will be doing

• Lead and manage the DFIR team, including analysts, responders, and forensic investigators.


• Define and maintain the DFIR strategic roadmap aligned with enterprise security goals.


• Oversee and direct response to security incidents across cloud, on-premises, and hybrid environments.


• Direct forensic collection, analysis, and preservation of digital evidence using industry-standard tools.


• Oversee investigations into internal misconduct, IP theft, fraud, and external attacks.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Security, or related field


• 8+ years in cybersecurity, including 4+ years in a DFIR leadership or senior management role.


• Proven experience managing large-scale security incidents and conducting digital forensic investigations.


• Strong knowledge of threat actors, attack vectors, and malware analysis.


• Hands-on experience with tools such as EnCase, X-Ways, Cellebrite, FTK, Carbon Black, CrowdStrike, Splunk, or similar.

The Offer

You will receive the following benefits:

• Medical, Dental, and Vision Insurance


• Vacation Time


• Stock Options

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.