Senior DFIR Lead: Incident Response & Digital Forensics

LevelBlue, LLC.; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with employer matching

Paid time off and holidays

Flexible spending accounts

Employee assistance programs

Training and development opportunities

Adoption assistance

Job summary

LevelBlue, LLC. is seeking a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate cybersecurity incidents, perform forensic analyses, and drive responses from forensics to reporting.

The role demands deep technical depth, strong analysis, and ability to work under pressure in a fast-paced environment. Responsibilities include leading responses, root-cause analysis, evidence handling, and inter-team coordination with

Qualifications

• Proven experience in DFIR.
• Familiar with digital forensic tools and techniques, including X-Ways or equivalents.
• Experience with incident response frameworks (NIST/SANS).
• Excellent analytical and problem-solving abilities.
• Solid understanding of networks, OS, and security tech.
• Strong written and verbal communication skills.
• Ability to work independently and manage multiple projects.

Responsibilities

• Lead and coordinate incident responses: containment, eradication, recovery.
• Investigate security breaches to determine root cause and impact.
• Conduct DFIR investigations across servers, workstations, networks, and cloud logs.
• Collect, preserve, and analyse digital evidence per legal/regulatory standards.
• Prepare detailed incident reports with a clear narrative for non-technical audiences.
• Maintain thorough documentation of all IR and forensic activities.
• Collaborate with internal teams and external clients/vendors.

Skills

DFIR

Forensic tools

IR frameworks

Analytical skills

Networking knowledge

Communication

Independent work

On-call flexibility

Education

Bachelor's or Master's in Digital Forensics/CS

Tools

X-Ways

Job description

LevelBlue, LLC. is seeking a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate cybersecurity incidents, perform forensic analyses, and drive responses from forensics to reporting.

The role demands deep technical depth, strong analysis, and ability to work under pressure in a fast-paced environment. Responsibilities include leading responses, root-cause analysis, evidence handling, and inter-team coordination with