Senior DFIR Lead: Incident Response & Digital Forensics

Trustwave; United States; On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer matching

Paid time off and holidays

HSAs and FSAs

Employee assistance programs

Training and development opportunities

Adoption assistance program

Job summary

LevelBlue in the United States is seeking a highly skilled DFIR Specialist to lead digital forensics and incident response engagements for diverse clients. You will investigate, contain, eradicate, and recover from incidents while coordinating with cross-functional teams.

You will analyze breaches, preserve evidence, document findings, and communicate with stakeholders, ensuring compliance with legal and regulatory requirements.

Qualifications

• Proven experience in DFIR.
• Strong knowledge of digital forensics tools and techniques, including X-Ways.
• Experience with incident response frameworks (NIST/SANS).
• Excellent analytical and problem-solving skills.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent written and verbal communication skills.
• Experience interfacing with clients or customers.
• Ability to work independently and manage multiple projects.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents in a client-facing capacity.
• Analyze security breaches to determine root cause and impact.
• Conduct digital forensic investigations on servers, workstations, networks, and cloud environments.
• Collect, preserve, and analyse digital evidence per legal and regulatory requirements.
• Prepare incident reports with a narrative suitable for non-technical audiences.
• Maintain thorough documentation of all incident response activities.
• Collaborate with DFIR, Advisory, Testing, Threat Intelligence, and client teams; guide clients through investigations.

Skills

DFIR experience

Analytical skills

Client interfacing

Independent worker

Travel flexibility

Incident response

Education

Bachelor's or Master's in Digital Forensics or CS

Tools

X-Ways

Python

PowerShell

Azure

AWS

Job description

LevelBlue in the United States is seeking a highly skilled DFIR Specialist to lead digital forensics and incident response engagements for diverse clients. You will investigate, contain, eradicate, and recover from incidents while coordinating with cross-functional teams.

You will analyze breaches, preserve evidence, document findings, and communicate with stakeholders, ensuring compliance with legal and regulatory requirements.