Cyber Defense Forensics Lead - Incident Response

Gritter Francona; Ashburn (VA); On-site; USD 160,000 - 230,000; Full time

Benefits offered by this job

Health care

Retirement plan

Life insurance

PTO

Disability

Training

Job summary

Gritter Francona is seeking a Cyber Defense Forensics Lead to guide a team of expert analysts in conducting digital forensic investigations and insider threat monitoring for CBP. The role demands deep technical expertise in forensic tools, incident response, and the ability to drive complex investigations end-to-end.

The ideal candidate has extensive experience in host-based and network-based security monitoring, SIEM platforms, and malware analysis, with a proven track record of documenting

Qualifications

• 7+ years of professional experience with incident response, insider threat investigations, and forensics.
• 5+ years hands-on experience with host-based and network-based security monitoring, forensic tools, SIEM platforms, and endpoint threat detection.
• Experience collecting data, reporting results, and handling escalation of security issues.
• Proven ability to create insider threat dashboards, reports and workflow diagrams.

Responsibilities

• Lead the CDF team in supporting insider threat operations, monitoring Data Loss Prevention (DLP) solutions, and investigating policy violations.
• Direct enterprise and endpoint digital forensic analysis on Windows, Linux, Mac, and cloud systems in support of investigations.
• Oversee the maintenance of the CBP SOC's forensics lab and recommend modernization of capabilities.
• Manage the lifecycle of CDF investigations, ensuring findings are documented in formal investigation reports and cases are escalated to law enforcement when necessary.
• Serve as SME in evidence preservation, chain of custody, and malware analysis.

Skills

Incident response

Forensics

Insider threat investigations

Data Loss Prevention

SIEM platforms

Endpoint threat detection

Malware analysis

Evidence preservation

Chain of custody

Tools

Forensic tools

Job description

Gritter Francona is seeking a Cyber Defense Forensics Lead to guide a team of expert analysts in conducting digital forensic investigations and insider threat monitoring for CBP. The role demands deep technical expertise in forensic tools, incident response, and the ability to drive complex investigations end-to-end.

The ideal candidate has extensive experience in host-based and network-based security monitoring, SIEM platforms, and malware analysis, with a proven track record of documenting