Lead, AI-Driven DFIR Investigations

Asymmetricsecurity; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Asymmetric, the world’s first AI-native DFIR lab, is assembling a world-class Incident Response Lead to shape how DFIR is done in the AI era. You will lead technically challenging forensic work and grow into a key technical leader on the founding team, supported by an AI engineering group.

You will spearhead investigations including business email compromise, ransomware, and cloud-based intrusions, build defensible timelines, codify best practices, and collaborate to develop AI DFIR tools.

Qualifications

• Significant experience in major incident investigations and forensic analysis efforts.
• Investigated cloud-based attacks in Microsoft and/or Google Workspace.
• Skilled in developing playbooks and analysis plans for complex forensic investigations.
• Able to clearly communicate technical findings to stakeholders and team members.

Responsibilities

• Lead investigations including business email compromise, ransomware, network intrusions, and insider threats; initial focus on cloud-based email attacks across Google and Microsoft environments.
• Build defensible timelines and substantiate findings across log sources.
• Uncover novel attack paths and codify best practices in case handbooks.
• Partner with the engineering team to develop AI DFIR tools.
• Grow into a key technical leader on the founding team with AI engineering support.

Skills

Incident response

Forensic analysis

Cloud security

Playbooks

Leadership

Technical communication

Job description

Asymmetric, the world’s first AI-native DFIR lab, is assembling a world-class Incident Response Lead to shape how DFIR is done in the AI era. You will lead technically challenging forensic work and grow into a key technical leader on the founding team, supported by an AI engineering group.

You will spearhead investigations including business email compromise, ransomware, and cloud-based intrusions, build defensible timelines, codify best practices, and collaborate to develop AI DFIR tools.