DFIR Director: Ransomware & Incident Response Leader

IronGate Cybersecurity LLC; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

IronGate Cybersecurity LLC is seeking a seasoned DFIR Director to lead incident response investigations across ransomware, data breach, cloud compromise, and insider threats. You will steer engagements from scoping to containment, coordinating with counsel, insurers, and executives while maintaining investigative rigor and business impact awareness.

The role requires deep DFIR expertise, strong executive communication, and proven leadership in a consulting or professional services setting.

Qualifications

• Minimum 6+ years of Digital Forensics and Incident Response experience.
• Proven leadership of ransomware and/or cyber extortion investigations across incident stages.
• Experience coordinating with legal counsel and cyber insurance stakeholders during incidents.
• Strong executive communication and business acumen in client-facing engagements.

Responsibilities

• Lead ransomware, cloud, and BEC engagements from intake to closure with strategic direction.
• Serve as senior client contact, briefing executives and coordinating with breach counsel and insurers.
• Develop defensible investigative plans, staffing models, budgets, and timelines for multiple engagements.
• Oversee forensics and IR workstreams to ensure evidence preservation while enabling business recovery.
• Mentor analysts and consultants, fostering collaboration and quality control.

Skills

DFIR leadership

Executive communication

Ransomware investigations

Client advisory

Mentorship

Budget & scoping

Team management

Tools

FTK

EnCase

X-Ways

KAPE

Velociraptor

Volatility

Job description

IronGate Cybersecurity LLC is seeking a seasoned DFIR Director to lead incident response investigations across ransomware, data breach, cloud compromise, and insider threats. You will steer engagements from scoping to containment, coordinating with counsel, insurers, and executives while maintaining investigative rigor and business impact awareness.

The role requires deep DFIR expertise, strong executive communication, and proven leadership in a consulting or professional services setting.