DFIR Lead: Incident Response & Forensics

NorthMark Strategies LLC; Dallas (TX); Vor Ort; USD 120.000 - 190.000; Vollzeit

Benefits dieser Stelle

Lunch stipend

Medical benefits

Dental & Vision

Parental leave

401(k) matching

Flexible benefits

Paid time off

Zusammenfassung

NorthMark Strategies LLC is seeking a Cyber Defense DFIR Manager to own incident response and digital forensics across a multi-entity ecosystem. You will mature the DFIR program, enhance tooling, and lead tabletop exercises to test readiness.

The role requires building a strong DFIR team and reporting forensic findings for legal and regulatory use. You will collaborate with IT, Legal, and HR, oversee incident command during major incidents, and drive standards for evidence handling across

Qualifikationen

• Bachelor’s degree in Computer Science, Information Security, or related field; equivalent experience considered.
• 7+ years of experience in incident response, digital forensics, or security operations.
• 3+ years of experience directly managing or mentoring IR/forensics professionals.
• Hands-on forensics across disk, memory, network, and cloud evidence; timeline reconstruction.

Aufgaben

• Maintain and update the enterprise incident response plan and entity-specific playbooks.
• Mature the DFIR function; strengthen tooling, workflows, and evidence handling standards.
• Lead forensic investigations across cloud, mobile, and on-prem evidence; ensure chain-of-custody.
• Lead forensic reporting suitable for legal/regulatory use and potential litigation.
• Build and maintain forensic lab infrastructure and secure evidence storage.
• Mature legal hold and eDiscovery processes across multiple entities.
• Serve as incident commander or deputy on major incidents; coordinate cross-functional response.
• Design and run tabletop exercises; own calendar and after-action reporting.
• Partner with cyber defense to ensure seamless detection-to-response handoffs.
• Evaluate AI/automation to accelerate triage and timeline reconstruction.

Kenntnisse

DFIR

Incident Response

Digital Forensics

Tabletop Exercises

Leadership

Cloud Forensics

MS 365/Entra

Ausbildung

Bachelor's degree in CS/IS or related

Tools

Magnet AXIOM

X-Ways Forensics

Magnet Nexus

Magnet Verakey

Jobbeschreibung

NorthMark Strategies LLC is seeking a Cyber Defense DFIR Manager to own incident response and digital forensics across a multi-entity ecosystem. You will mature the DFIR program, enhance tooling, and lead tabletop exercises to test readiness.

The role requires building a strong DFIR team and reporting forensic findings for legal and regulatory use. You will collaborate with IT, Legal, and HR, oversee incident command during major incidents, and drive standards for evidence handling across