DFIR Team Lead: Incident Response Leader

VulnU; McLean (VA); On-site; USD 113,000 - 257,000; Full time

Benefits offered by this job

Learning budget

Job summary

Booz Allen Hamilton in McLean, VA seeks a DFIR Team Lead to inspire a skilled incident response team and lead major incident containment and resolution efforts. You will coordinate with Cybersecurity, Operations, and legal stakeholders and maintain critical incident documentation.

The role requires guiding junior analysts, delivering client-focused outcomes, and driving continuous learning and excellence in Digital Forensics and Incident Response.

Qualifications

• 3 years of experience with digital forensics or incident response.
• Experience analyzing Windows, Mac, and Linux systems with standard DFIR toolsets.
• Ability to communicate findings and prepare detailed technical reports.

Responsibilities

• Lead incident response for major incidents and coordinate containment.
• Develop and review incident documentation.
• Mentor junior team members and provide technical leadership.

Skills

Incident response

DFIR toolsets

Python scripting

PowerShell scripting

Log analysis

Timeline analysis

Written communication

On-call rotation

Education

HS diploma or GED

Bachelor's degree preferred

Master's degree a plus

Tools

FTK

EnCase

XWF

Axiom

Job description

Booz Allen Hamilton in McLean, VA seeks a DFIR Team Lead to inspire a skilled incident response team and lead major incident containment and resolution efforts. You will coordinate with Cybersecurity, Operations, and legal stakeholders and maintain critical incident documentation.

The role requires guiding junior analysts, delivering client-focused outcomes, and driving continuous learning and excellence in Digital Forensics and Incident Response.