Senior DFIR Lead: Incident Response & Forensics

LevelBlue, LLC.; United States; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Matching

Paid Time Off

HSA Options

Adoption Assistance

Training & Development

Job summary

LevelBlue, LLC seeks a Digital Forensics and Incident Response (DFIR) Specialist to join our global DFIR team. You will investigate cybersecurity incidents, perform digital forensics, and lead responses from containment to reporting.

The role requires deep technical expertise, the ability to work independently, and collaboration with cross-functional teams and clients. Travel and on-call rotations are part of the process.

Qualifications

• Proven DFIR experience and incident response capability.
• Knowledge of digital forensics tools and techniques (X-Ways or similar).
• Experience with IR frameworks (NIST, SANS) and strong problem solving.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents.
• Conduct digital forensics investigations across devices and logs.
• Collect, preserve, and analyse digital evidence per legal/regulatory requirements.
• Prepare detailed incident reports with a clear narrative for non-technical audiences.
• Collaborate with internal teams and client IT/legal/compliance.

Skills

DFIR experience

Analytical thinking

Strong communication

Independence

Travel flexibility

Education

Bachelor’s/Master’s in Digital Forensics or CS

DFIR Certifications

Tools

X-Ways

Python scripting

PowerShell scripting

Job description

LevelBlue, LLC seeks a Digital Forensics and Incident Response (DFIR) Specialist to join our global DFIR team. You will investigate cybersecurity incidents, perform digital forensics, and lead responses from containment to reporting.

The role requires deep technical expertise, the ability to work independently, and collaboration with cross-functional teams and clients. Travel and on-call rotations are part of the process.