DFIR Manager: Incident Response & Forensics Lead

Forensic Focus; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

NorthMark Strategies in Dallas, TX, seeks a Cyber Defense DFIR Manager to own incident response and digital forensics across multiple operating companies. The role leads forensic investigations, runs tabletop exercises, and serves as incident command for major security incidents.

You will oversee hands-on DFIR across host, network, cloud, mobile and memory forensics, including AWS, Azure, Kubernetes, and Microsoft 365/Entra investigations.

Qualifications

• Hands-on DFIR expertise across host, network, cloud, mobile and memory forensics.
• Experience with Microsoft 365/Entra investigations.
• Experience managing teams and multi-entity incident response programs.

Responsibilities

• Own incident response and digital forensics within the cyber defense function across multiple operating companies.
• Lead forensic investigations and run tabletop exercises.
• Serve as incident commander for significant security incidents.

Skills

DFIR

Host forensics

Network forensics

Cloud forensics (AWS)

Cloud forensics (Azure)

Kubernetes forensics

Mobile forensics

Memory forensics

Microsoft 365/Entra investigations

Unified Audit Log

Purview eDiscovery

Graph API

Job description

NorthMark Strategies in Dallas, TX, seeks a Cyber Defense DFIR Manager to own incident response and digital forensics across multiple operating companies. The role leads forensic investigations, runs tabletop exercises, and serves as incident command for major security incidents.

You will oversee hands-on DFIR across host, network, cloud, mobile and memory forensics, including AWS, Azure, Kubernetes, and Microsoft 365/Entra investigations.