Senior DFIR Specialist: Incident Response & Forensics

LevelBlue, LLC.; Northern (KY); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视ion

401(k) with employer matching

Generous paid time off and holidays

Health savings accounts

Employee assistance programs

Training and development opportunities

Adoption assistance program

Job summary

LevelBlue seeks a skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global DFIR team. You will investigate cybersecurity incidents, perform forensic analyses, and drive responses from analysis to reporting in a high-pressure setting.

The role requires deep technical expertise, strong problem-solving abilities, and the capacity to coordinate cross-functional teams internally and with clients. Occasional travel and on-call support are expected.

Qualifications

• Proven DFIR experience and strong analytical skills.
• Knowledge of digital forensics tools and techniques.
• Experience with NIST/SANS incident response frameworks.
• Excellent written and verbal communication abilities.
• Ability to work independently and manage multiple projects.

Responsibilities

• Lead forensic investigations and incident response efforts.
• Analyse breaches to determine root cause and impact.
• Prepare detailed incident reports for non-technical audiences.
• Collaborate with DFIR, Advisory, Threat Intelligence, and client teams.
• Document evidence handling per legal and regulatory requirements.

Skills

DFIR experience

Threat analysis

Strong communication

Independent work

Education

Bachelor's degree in Digital Forensics

Tools

X-Ways

Forensic tooling

Job description

LevelBlue seeks a skilled Digital Forensics and Incident Response (DFIR) Specialist to join our Global DFIR team. You will investigate cybersecurity incidents, perform forensic analyses, and drive responses from analysis to reporting in a high-pressure setting.

The role requires deep technical expertise, strong problem-solving abilities, and the capacity to coordinate cross-functional teams internally and with clients. Occasional travel and on-call support are expected.