Cyber Defense DFIR Manager

Forensic Focus; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

NorthMark Strategies in Dallas, TX, seeks a Cyber Defense DFIR Manager to own incident response and digital forensics across multiple operating companies. The role leads forensic investigations, runs tabletop exercises, and serves as incident command for major security incidents.

You will oversee hands-on DFIR across host, network, cloud, mobile and memory forensics, including AWS, Azure, Kubernetes, and Microsoft 365/Entra investigations.

Qualifications

• Hands-on DFIR expertise across host, network, cloud, mobile and memory forensics.
• Experience with Microsoft 365/Entra investigations.
• Experience managing teams and multi-entity incident response programs.

Responsibilities

• Own incident response and digital forensics within the cyber defense function across multiple operating companies.
• Lead forensic investigations and run tabletop exercises.
• Serve as incident commander for significant security incidents.

Skills

DFIR

Host forensics

Network forensics

Cloud forensics (AWS)

Cloud forensics (Azure)

Kubernetes forensics

Mobile forensics

Memory forensics

Microsoft 365/Entra investigations

Unified Audit Log

Purview eDiscovery

Graph API

Job description

# Cyber Defense DFIR Manager*NorthMark Strategies***Dallas, TX**Manager · Full-time### The RoleThis role owns incident response and digital forensics within the cyber defense function, maintaining incident response plans and playbooks across multiple operating companies. It involves leading forensic investigations, running tabletop exercises, and serving as incident command for significant security incidents.### Skills & ExperienceRequires hands-on DFIR expertise across host, network, cloud (AWS, Azure, Kubernetes), mobile and memory forensics, plus Microsoft 365/Entra investigations using Unified Audit Log, Purview eDiscovery and Graph API. Experience managing teams and maintaining multi-entity incident response programs is essential.### Who It SuitsSuited to an experienced DFIR practitioner ready to step into a managerial position, who enjoys building and maturing forensic programs, leading investigations, and mentoring a growing incident response team within a complex, diversified organization.