Remote Senior DFIR Lead: Master Incident Response

Reinsurance Group of America, Incorporated; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Reinsurance Group of America, Incorporated is seeking a senior incident response professional to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams through critical incidents. You will work across Windows, Linux, macOS, M365, AWS, Azure, and hybrid environments on detections to recovery.

The role requires hands-on DFIR, advisory capabilities, and security program leadership, with interactions across executives and legal teams in a global setting.

Qualifications

• 5+ years in incident response, DFIR, security operations, consulting, or related cybersecurity disciplines.
• Experience leading major cyber incidents involving ransomware, BEC, insider threats, cloud compromise, or APTs.
• Strong digital forensics capability using forensic and triage tools.
• Experience with Splunk, Defender, CrowdStrike, ServiceNow SIR, and cloud security technologies.
• Knowledge of network protocols, detection engineering, log analytics, and threat hunting methodologies.
• Excellent verbal and written communication for technical and executive audiences.
• Ability to manage multiple priorities in a global enterprise.
• Forensic tools experience (FTK, Encase, X-Ways, Magnet AXIOM, SIFT) mandatory.

Responsibilities

• Lead enterprise incident response and cyber crisis engagements from detection through recovery.
• Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, M365, AWS, Azure, and hybrid environments.
• Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intel platforms.
• Develop containment, eradication, and remediation strategies aligned to business risk.
• Produce executive briefings, technical reports, board-ready updates, and post-incident reviews.
• Partner with legal, compliance, privacy, audit, and external stakeholders when required.
• Drive adoption of AI-assisted workflows to improve investigation speed, reporting quality, and efficiency.
• Support the 24/7 on-call rotation.

Skills

Incident response

DFIR

Security operations

Threat hunting

Digital forensics

Communication

Education

GCFA

GCFE

CISSP

CISM

Azure Security Engineer

AWS Security Specialty

BSc in Cybersecurity

Tools

Splunk

Microsoft Defender

CrowdStrike Falcon

ServiceNow SIR

FTK

EnCase

X-Ways

Magnet AXIOM

SIFT

Job description

Reinsurance Group of America, Incorporated is seeking a senior incident response professional to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams through critical incidents. You will work across Windows, Linux, macOS, M365, AWS, Azure, and hybrid environments on detections to recovery.

The role requires hands-on DFIR, advisory capabilities, and security program leadership, with interactions across executives and legal teams in a global setting.