Senior DFIR Lead & Incident Response Chief

MANTECH; Linthicum (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

MANTECH in Linthicum, MD seeks a motivated Intrusions Management Chief to lead DFIR activities, manage intrusion investigations, and brief leadership. This senior role interfaces with Government customers and provides technical oversight for intrusion analysis and incident response teams.

Ideal candidates hold active DFIR certifications, 7+ years in DFIR, 3+ years in leadership, and strong skills in threat intelligence, memory analysis, and network intrusion analysis.

Qualifications

• Active DFIR certifications (e.g., GCFA, GCIH, DFE) or equivalent.
• 7+ years hands-on DFIR experience.
• 5+ years focused on network intrusion analysis and malware forensics.
• 3+ years in leadership/supervisory roles directing intrusion investigations.

Responsibilities

• Lead DFIR activities and provide technical oversight to intrusion analysis and incident response personnel.
• Manage intrusion investigations and incident responders to ensure quality and timeliness.
• Analyze APT activity and correlate findings across host forensics, network logs, and threat intel.
• Brief leadership on investigation progress, findings, and operational metrics.
• Serve as primary technical contact for Government customers on intrusion tasks.
• Proactively alert Government stakeholders to potential technical or resource issues.

Skills

DFIR leadership

Network intrusion analysis

Memory analysis

Threat intelligence integration

Executive briefing

Supervisory experience

Job description

MANTECH in Linthicum, MD seeks a motivated Intrusions Management Chief to lead DFIR activities, manage intrusion investigations, and brief leadership. This senior role interfaces with Government customers and provides technical oversight for intrusion analysis and incident response teams.

Ideal candidates hold active DFIR certifications, 7+ years in DFIR, 3+ years in leadership, and strong skills in threat intelligence, memory analysis, and network intrusion analysis.