Senior DFIR Team Lead – Incident Response

Booz Allen Hamilton; McLean (VA); On-site; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton is seeking a DFIR Team Lead to guide a skilled group of incident response analysts. You will lead major incidents, coordinate containment, and provide clear updates to executives and clients. You will also develop critical incident documentation and mentor teammates to elevate DFIR capabilities.

With a focus on continuous improvement, you will drive program enhancements, implement new DFIR initiatives, and ensure top‑notch client delivery across diverse environments.

Qualifications

• 3+ years of experience with digital forensics or incident response.
• Experience analyzing Windows and non-Windows systems (Mac/Linux) and using DFIR toolsets (FTK, EnCase, XWF, Axiom).
• Experience with scripted DFIR tools written in Python or PowerShell.

Responsibilities

• Lead incident response for major incidents and coordinate containment and resolution.
• Convey status updates to Cybersecurity, Operations, Legal, and other stakeholders.
• Develop, maintain, and review incident documentation.
• Provide thought leadership for program improvements and new initiatives.
• Mentor junior team members and foster continuous learning in DFIR.

Skills

Incident response

Digital forensics

Team leadership

Client communication

Timeline analysis

Python/PowerShell

Log analysis

Cross-OS analysis

On-call rotation

Education

HS Diploma/GED

Certifications

Tools

FTK

EnCase

XWF

Axiom

Python

PowerShell

Job description

Booz Allen Hamilton is seeking a DFIR Team Lead to guide a skilled group of incident response analysts. You will lead major incidents, coordinate containment, and provide clear updates to executives and clients. You will also develop critical incident documentation and mentor teammates to elevate DFIR capabilities.

With a focus on continuous improvement, you will drive program enhancements, implement new DFIR initiatives, and ensure top‑notch client delivery across diverse environments.