Senior Digital Forensics & Incident Response Lead

Sprymethods; Linthicum (MD); Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

Sprymethods seeks a seasoned Digital Forensics and Incident Response leader to direct CFL IR activities, manage intrusion analysis personnel, and coordinate network, malware, and memory forensics for government work.

You will brief technical findings to government leadership and ensure all IR activities comply with the PWS, while identifying technical and resource limitations.

Maryland on-site role; TS/SCI eligibility preferred.

Qualifications

• TS/SCI clearance eligible.
• Active DFE, GCFA, GCIH, or equivalent certification approved by the COR.
• 7+ years hands-on Digital Forensics and Incident Response, incl. 5+ years network intrusion analysis, malware forensics, memory analysis.
• 3+ years leadership/supervisory in intrusion investigations and briefing leadership.
• Last 3 years analyzing APT activity and correlating findings across host forensics, network logs, and threat intel.

Responsabilités

• Lead CFL Digital Forensics and Incident Response activities.
• Manage intrusion analysis and incident response personnel.
• Direct network intrusion analysis, malware forensics, and memory analysis.
• Lead intrusion investigations and monitor investigative quality and efficiency.
• Analyze advanced persistent threat activity and correlate findings across sources.
• Brief technical findings to Government leadership while ensuring compliance with the PWS.
• Serve as the primary Government technical point of contact for intrusion analysis and incident response.

Connaissances

Digital Forensics

Incident Response

Team Leadership

Formation

DFE

GCFA

GCIH

Description du poste

Sprymethods seeks a seasoned Digital Forensics and Incident Response leader to direct CFL IR activities, manage intrusion analysis personnel, and coordinate network, malware, and memory forensics for government work.

You will brief technical findings to government leadership and ensure all IR activities comply with the PWS, while identifying technical and resource limitations.

Maryland on-site role; TS/SCI eligibility preferred.