Senior DFIR Lead - Remote Incident Response Expert

Soteria - Security Solutions & Advisory; Charleston (SC); Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Remote work

Job summary

Soteria - Security Solutions & Advisory is seeking an experienced Incident Response/DFIR professional to work remotely with clients across the United States. You will lead investigations into cyber incidents, triage data, and guide clients through recovery while coordinating resources and mentoring junior staff.

The role requires 5+ years in digital forensics or incident response, strong leadership, and the ability to communicate complex findings to both technical and non-technical audiences.

Qualifications

• 5+ years of digital forensics, incident response, or other relevant experience.
• Experience leading complex engagements including scoping and client interfacing.
• Strong leadership and crisis management skills.
• Experience examining logs and artifacts to detect indicators of compromise.
• Client-facing role requiring clear written reports and presentations.

Responsibilities

• Provide clients with guidance during incident response and recovery.
• Lead and participate in security incident investigations, triaging and data collection.
• Own DFIR processes to improve team capabilities and ensure timely client deliverables.
• Coordinate resources to deliver engagements on time and accurately.
• Identify gaps in capabilities and tooling and address them.
• Document findings and recommend remediation to clients.
• Maintain relationships with clients post-engagement for ongoing remediation support.
• Stay current on security trends and practices and share with the team.
• Collaborate with managed detection and response team to improve detection.
• Mentor other team members to grow company capacity.

Skills

Digital forensics

Incident response

Network security

Team leadership

Crisis management

Communication

Windows forensics

Linux forensics

Scripting

Tools

Axiom

FTK

SIEM

Job description

Soteria - Security Solutions & Advisory is seeking an experienced Incident Response/DFIR professional to work remotely with clients across the United States. You will lead investigations into cyber incidents, triage data, and guide clients through recovery while coordinating resources and mentoring junior staff.

The role requires 5+ years in digital forensics or incident response, strong leadership, and the ability to communicate complex findings to both technical and non-technical audiences.