Senior DFIR Lead — Incident Response & Forensics Architect

Socket.dev; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer matching

Paid time off and holidays

FSAs/HSAs

Employee assistance program

Training and development

Adoption assistance

Job summary

LevelBlue seeks a skilled Digital Forensics and Incident Response Specialist to join our Global DFIR team. You will investigate and respond to cybersecurity incidents, conduct forensic investigations, and drive engagements from forensics to reporting.

High technical proficiency and calm under pressure are essential. You will work with cross-functional teams and client IT, legal, and compliance stakeholders, contributing to timely, well-documented incident outcomes.

Qualifications

• Proven experience in DFIR.
• Strong knowledge of digital forensics tools and techniques (X-Ways or similar).
• Experience with incident response frameworks (NIST, SANS, or similar).
• Excellent analytical and problem-solving skills.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple projects.
• Willingness to travel occasionally and participate in on-call rotations.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents from identification to recovery.
• Analyse and investigate security breaches to determine root cause and impact.
• Conduct digital forensic investigations on devices and networks across environments.
• Collect, preserve, and analyse digital evidence in compliance with legal requirements.
• Prepare detailed incident reports with a clear, stakeholder-friendly narrative.
• Maintain thorough documentation of all incident response activities.

Skills

DFIR expertise

Analytical skills

Communication skills

Education

Bachelor's or Master's in Digital Forensics

Tools

X-Ways Forensics

Python

PowerShell

Job description

LevelBlue seeks a skilled Digital Forensics and Incident Response Specialist to join our Global DFIR team. You will investigate and respond to cybersecurity incidents, conduct forensic investigations, and drive engagements from forensics to reporting.

High technical proficiency and calm under pressure are essential. You will work with cross-functional teams and client IT, legal, and compliance stakeholders, contributing to timely, well-documented incident outcomes.