AI-First DFIR & Threat Intelligence Lead (Weekend)

Modernizing Medicine, Inc.; United States; On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, and vision benefits

401(k) with company matching

Paid time off and parental leave

Tuition reimbursement

Hybrid/remote work options

Job summary

Modernizing Medicine, Inc. (ModMed) seeks a Principal, DFIR & Threat Intelligence Analyst to lead end-to-end cyber defense, combining CTI, AI-augmented SOC monitoring, IR, digital forensics, and malware analysis.

This role covers weekend shifts (Thu–Sun) with hands-on incident response, containment, and root-cause remediation across cloud and on-prem environments. You will set detection strategies, mentor SOC staff, and brief executive leadership, while enforcing regulatory standards and

Qualifications

• 10+ years in Digital Forensics, Incident Response, SOC and Cyber Threat Intelligence.
• 3+ years as Principal/Lead/Staff overseeing enterprise breach responses.
• Experience with HIPAA/PCI DSS/SOC2/HITRUST standards and regulatory breach assessments.
• Strong knowledge of AWS (EC2/EKS), CI/CD, and enterprise identity architectures.

Responsibilities

• Incident Command, Digital Forensics & Malware Analysis during High/ Critical events.
• AI-first automation, log architecture, detection engineering and SOAR workflows.
• CTI hunting, threat surface defense, and DRP monitoring with deception assets.
• Cloud/Identity security across AWS, Okta, AD, Duo; defend pipelines and containers.
• Regulatory breach determinations; liaise with Legal and Privacy teams.
• Program leadership, metrics, MDR vendor oversight and staff upskilling.

Skills

DFIR expertise

Threat Hunting

AI-driven security

Incident response leadership

Memory forensics

Education

Bachelor's degree in Cybersecurity or related

Master's degree preferred

Tools

CrowdStrike RTR

KAPE

Volatility

FTK Imager

Velociraptor

Cribl Stream

Tines SOAR

CrowdStrike Falcon

Job description

Modernizing Medicine, Inc. (ModMed) seeks a Principal, DFIR & Threat Intelligence Analyst to lead end-to-end cyber defense, combining CTI, AI-augmented SOC monitoring, IR, digital forensics, and malware analysis.

This role covers weekend shifts (Thu–Sun) with hands-on incident response, containment, and root-cause remediation across cloud and on-prem environments. You will set detection strategies, mentor SOC staff, and brief executive leadership, while enforcing regulatory standards and