Hybrid DFIR Incident Response Specialist

Trustwave; Washington (District of Columbia); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视ion

Job summary

LevelBlue, a leading pure-play managed security services provider, seeks a skilled Digital Forensics and Incident Response (DFIR) Specialist to join the Global LevelBlue DFIR team. You will investigate cybersecurity incidents, conduct forensic investigations, and serve as the primary client contact to drive timely containment and remediation.

This role requires deep technical expertise, strong analytical skills, and the ability to work independently against milestones across forensics, log

Qualifications

• Proven experience in DFIR.
• Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling.
• Experience with incident response frameworks and methodologies, such as NIST, SANS, or similar.
• Excellent analytical and problem-solving skills.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent written and verbal communication skills.
• Experience and interest in interfacing with clients or customers.
• Ability to work independently and manage multiple projects simultaneously.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery in a client-facing capacity.
• Analyse and investigate security breaches to determine the root cause and impact.
• Conduct digital forensic science-based incident response investigations on a variety of digital devices, including servers and end user workstations, network systems, SaaS platforms that contain artifacts, logging, and data of investigative relevance.
• Collect, preserve, and analyse digital evidence in accordance with legal and regulatory requirements.
• Prepare detailed incident reports, including findings and properly authoring a story that does not just restate factual dates/times, but articulates a story of the incident for a non-technical audience.
• Maintain accurate and thorough documentation of all incident response activities and forensic investigations.
• Work closely with cross-functional teams inclusive of DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, etc., LevelBlue services.
• Work closely with client teams including IT, legal, compliance, and external vendors, to support expert delivery during engagements.
• Serve as the primary point of contact to guide clients through the forensic investigation and incident containment.
• Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes.
• This role also includes participation in an on-call schedule to support operational continuity and timely response to critical incidents.
• Flexibility to support occasional travel and work outside standard business hours, including evenings and weekends, as required annually measured against a utilization target.

Skills

DFIR

X-Ways

Incident response

NIST/SANS

Communication skills

Client interfacing

Education

Bachelor's or Master's in Digital Forensics/CS

DFIR certifications

Tools

Azure

AWS

Job description

LevelBlue, a leading pure-play managed security services provider, seeks a skilled Digital Forensics and Incident Response (DFIR) Specialist to join the Global LevelBlue DFIR team. You will investigate cybersecurity incidents, conduct forensic investigations, and serve as the primary client contact to drive timely containment and remediation.

This role requires deep technical expertise, strong analytical skills, and the ability to work independently against milestones across forensics, log