DFIR Program Lead — Cyber Defense

Career Techniques; Dallas (TX); Ibrido; USD 150.000 - 210.000; Tempo pieno

Descrizione del lavoro

Career Techniques is seeking a seasoned DFIR leader in Dallas to advance incident response plans and mature a multi-entity DFIR program. You will supervise a growing team and drive forensic investigations across host, cloud, mobile, and memory evidence while coordinating with Legal and IT stakeholders.

Lead forensic reporting for legal/regulatory needs, build the forensic lab, and define evidence handling standards.

Competenze

• Bachelor’s degree in Computer Science, Information Security, or related field; equivalent experience considered in lieu of a degree.
• 7+ years of incident response, digital forensics, or security operations experience, including incident response plan/playbook maintenance.
• 3+ years directly managing or mentoring incident response/forensics professionals.
• Hands-on forensics across disk, memory, network, cloud evidence, including timeline reconstruction.
• Experience with mobile device forensics (iOS/Android) and cloud-native forensics (AWS/Azure/Kubernetes).
• Experience with Microsoft 365/Entra forensics and Purview eDiscovery/Content Search.
• Experience producing forensic reports for legal/regulatory purposes; litigation support.
• Experience building or maintaining forensic lab infrastructure and evidence management.

Mansioni

• Maintain and update enterprise incident response plans and entity-specific playbooks.
• Mature and operationalize DFIR as a dedicated capability across tooling, workflows, and metrics.
• Lead forensic investigations across host, network, cloud, mobile, and memory evidence.
• Lead DFIR investigations within Microsoft 365/Entra ecosystem and graph-based collection.
• Produce clear forensic findings and reports for legal/regulatory use and potential litigation.
• Build and maintain forensic lab, evidence storage, and chain-of-custody systems.
• Mature legal hold and eDiscovery processes with Legal partners.
• Serve as incident commander or deputy on significant incidents; lead post-incident reviews.
• Design and run table-top exercises; own exercise calendar and after-action reporting.
• Partner with cross-entity leadership to standardize incident readiness across the Ecosystem.
• Collaborate with SIEM/detection teams to ensure smooth handoff to investigation and response.
• Evaluate AI/automation to accelerate triage and timeline reconstruction.
• Integrate threat intel into incident response playbooks and methodologies.
• Report on incident response posture and DFIR metrics to leadership; support audits.

Conoscenze

Incident response

Digital forensics

Team leadership

DFIR maturity

Forensic reporting

Table top exercises

Cross-entity standardization

AI-enabled DFIR

Threat intelligence integration

Evidence handling

Formazione

Bachelor's degree in Computer Science, Information Security, or related field

Strumenti

Magnet AXIOM

Magnet Nexus

X-Ways Forensics

Magnet Verakey

KQL

Python

PowerShell

EDR tooling

Cloud forensics (AWS/Azure/Kubernetes)

Descrizione del lavoro

Career Techniques is seeking a seasoned DFIR leader in Dallas to advance incident response plans and mature a multi-entity DFIR program. You will supervise a growing team and drive forensic investigations across host, cloud, mobile, and memory evidence while coordinating with Legal and IT stakeholders.

Lead forensic reporting for legal/regulatory needs, build the forensic lab, and define evidence handling standards.