DFIR Lead: Cyber Incident Response & Forensics

NorthMark Strategies LLC; United States; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Company-Paid Lunch Stipend

Employer-Paid Medical benefits

Paid Parental Leave

Employee Assistance Program

Life insurance

Disability insurance

401(k) match

Flexible spending accounts

Paid time off + holidays

Job summary

NorthMark Strategies LLC seeks a Cyber Defense DFIR Manager to lead incident response and digital forensics across its diverse operating companies. You will build and mature the DFIR program, lead forensic investigations, and coordinate with Legal, HR, and IT to ensure readiness and regulatory compliance.

The role demands hands-on DFIR expertise, incident‑response plan stewardship, and the ability to run table top exercises while scaling a multi‑tenant security program.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field; equivalent experience considered.
• 7+ years of incident response, digital forensics, or security operations experience.
• 3+ years of direct management or mentoring of IR/forensics professionals.
• Hands-on forensics across disk, memory, network, cloud evidence; timeline reconstruction.

Responsibilities

• Maintain and update the enterprise incident response plan and playbooks across the ecosystem.
• Lead forensic investigations across host, network, cloud, mobile, and memory evidence.
• Establish chain-of-custody and regulatory-compliant evidence handling.
• Design and run table top exercises; own exercise calendar and after-action reporting.
• Lead incident command on significant incidents and coordinate cross-functional response.

Skills

Incident response

Digital forensics

Team leadership

Cloud forensics

Tabletop exercises

Regulatory compliance

Education

Bachelor’s degree in Computer Science or related field

Tools

Magnet AXIOM

Magnet Nexus

X-Ways Forensics

Magnet Verakey

Job description

NorthMark Strategies LLC seeks a Cyber Defense DFIR Manager to lead incident response and digital forensics across its diverse operating companies. You will build and mature the DFIR program, lead forensic investigations, and coordinate with Legal, HR, and IT to ensure readiness and regulatory compliance.

The role demands hands-on DFIR expertise, incident‑response plan stewardship, and the ability to run table top exercises while scaling a multi‑tenant security program.