Digital Forensics Incident Response Lead

Spry Methods, Inc.; Linthicum (MD); Presencial; USD 200.000 - 225.000; Jornada completa

Descripción de la vacante

Spry Methods, Inc. seeks a Digital Forensics and Incident Response (DFIR) Lead to direct all DFIR activities at a government digital forensics laboratory.

This role manages intrusion analysis and incident response staff, providing technical oversight for investigations across multiple data sources. Requirements include TS/SCI eligibility, GCFA or GCIH certification, 7+ years in DFIR (5+ in network intrusion analysis and memory forensics), 3+ years in leadership, and prior experience briefing

Formación

• Active TS/SCI clearance eligibility
• GCFA or GCIH certification required
• 7+ years in Digital Forensics and Incident Response, 5+ years in network intrusion analysis and memory forensics
• 3+ years of leadership or supervisory experience in intrusion investigations
• Experience analyzing advanced persistent threat activity and correlating findings across sources

Responsabilidades

• Lead CFL Digital Forensics and Incident Response activities.
• Manage intrusion analysis and incident response personnel.
• Direct network intrusion analysis, malware forensics, and memory analysis.
• Lead intrusion investigations and monitor quality and efficiency.
• Analyze advanced persistent threat activity and correlate findings from multiple sources.
• Brief technical findings to Government leadership.
• Ensure all activities comply with the PWS.
• Serve as the primary Government technical POC for intrusion analysis and incident response.

Conocimientos

DFIR

Leadership

Network analysis

Malware forensics

Memory analysis

Threat intel

Clearance eligible

GCFA

GCIH

TS/SCI eligible

Descripción del empleo

Spry Methods is seeking a Digital Forensics and Incident Response (DFIR) Lead to direct all DFIR activities at a government digital forensics laboratory. This position manages the intrusion analysis and incident response staff and gives them technical oversight. It is responsible for directing intrusion investigations and overseeing analysis of advanced persistent threat (APT) activity across multiple forensic and intelligence data sources.

What Your Day-To-Day Looks Like (Position Responsibilities):

• Lead CFL Digital Forensics and Incident Response activities.
• Manage intrusion analysis and incident response personnel.
• Direct network intrusion analysis, malware forensics, and memory analysis.
• Lead intrusion investigations and monitor investigative quality and efficiency.
• Analyze advanced persistent threat activity.
• Correlate findings from host forensics, network logs, and threat intelligence.
• Brief technical findings to Government leadership.
• Ensure all intrusion and incident response activities comply with the PWS.
• Serve as the primary Government technical point of contact for intrusion analysis and incident response.
• Proactively identify and communicate technical, programmatic, and resource limitations.

What You Need to Succeed (Minimum Requirements):

• TS/SCI clearance eligible.
• Active DFE, GCFA, GIAC Certified Incident Handler (GCIH), or equivalent certification approved by the COR.
• At least seven years of hands-on Digital Forensics and Incident Response experience, including at least five years focused on network intrusion analysis, malware forensics, and memory analysis.
• At least three years of leadership or supervisory experience within the last five years leading intrusion investigations, managing incident responders, and briefing technical findings to leadership.
• Demonstrated experience within the last three years analyzing advanced persistent threat activity and correlating findings across host forensics, network logs, and threat intelligence.

$200,000 - $225,000 a year

Final compensation will be based on experience, qualifications, certifications, clearance level, and contract requirements. This position is contingent upon contract award.