Onsite Senior Incident Response & Forensics Lead

ClearFocus Technologies; Germantown (MD); On-site; USD 125,000 - 155,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

401(k)

Professional development reimbursement

Job summary

ClearFocus Technologies seeks an Incident Response and Forensics Lead for a 100% onsite role in Germantown, Maryland. This hands-on position manages a security team and oversees investigations, analysis, and responses to cyber incidents across cloud, endpoint, and access management domains.

The ideal candidate has incident handling and forensics experience with GCFE, GCIH or CySA, and familiarity with Magnet/GrayKey and EnCase/Cellebrite tooling. Active TS clearance is required.

Qualifications

• Experience in cyber incident investigation and forensics.
• Experience with enterprise cyber defense incident response.
• Ability to coordinate with federal leadership and teams.

Responsibilities

• Manage day to day operations of the incident response team.
• Perform briefings and coordinate with the customer and federal leadership.
• Collect intrusion artifacts and enable mitigation of cyber incidents.
• Coordinate expert technical support to enterprise cyber defense technicians.
• Coordinate incident response functions.
• Monitor external data sources related to cyber defense.

Skills

Incident response

Digital forensics

Leadership

Cloud security

Endpoint security

Access management

Education

Bachelor's degree or higher

Tools

Magnet Forensics

GrayKey

EnCase

Cellebrite

GCFE

GCIH

CySA+

Job description

ClearFocus Technologies seeks an Incident Response and Forensics Lead for a 100% onsite role in Germantown, Maryland. This hands-on position manages a security team and oversees investigations, analysis, and responses to cyber incidents across cloud, endpoint, and access management domains.

The ideal candidate has incident handling and forensics experience with GCFE, GCIH or CySA, and familiarity with Magnet/GrayKey and EnCase/Cellebrite tooling. Active TS clearance is required.