Senior DFIR Lead: Incident Response & Forensics Expert

Trustwave; United States; Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Comprehensive health benefits

401(k) with employer matching

Generous PTO and holidays

Flexible spending accounts & Health St

Employee assistance programs

Training & development opportunities

Adoption assistance

Job summary

LevelBlue seeks a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate and respond to cybersecurity incidents, conduct digital forensics, and drive investigations from forensics to log analysis and report writing.

This role demands deep technical expertise, strong analytical skills, and the ability to perform under pressure in a fast-paced environment.

Qualifications

• Proven experience in DFIR.
• Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling.
• Experience with incident response frameworks and methodologies, such as NIST, SANS, or similar.
• Excellent analytical and problem-solving skills.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple projects simultaneously.
• Flexibility to support occasional travel and work outside standard business hours, including evenings and weekends, as required annually measured against a utilization target.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery.
• Analyse security breaches to determine root cause and impact; conduct forensic investigations on servers, endpoints, and networks.
• Prepare detailed incident reports that tell a clear story for non-technical audiences; maintain thorough documentation.

Skills

DFIR expertise

Incident response

Analytical thinking

Network protocols knowledge

Communication skills

Independence & multi-project mgmt

On-call availability

Travel flexibility

Education

Bachelor's/Master’s in Digital Forensics or CS-related field

DFIR certifications

Tools

Python

PowerShell

Azure

AWS

Oracle

GWP

X-Ways

Job description

LevelBlue seeks a highly skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. You will investigate and respond to cybersecurity incidents, conduct digital forensics, and drive investigations from forensics to log analysis and report writing.

This role demands deep technical expertise, strong analytical skills, and the ability to perform under pressure in a fast-paced environment.