Senior Digital Forensics & Incident Response Lead

Bwcyberservices; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

BW Cyber Services’ Digital Forensics Incident Response (DFIR) team seeks a subject matter expert with in-depth understanding of threat actors and attacker TTPs. The role requires leading large client-facing projects, mentoring consultants, and applying broad security knowledge to evolving attacker behavior.

The candidate should possess strong consulting skills, business acumen, and the ability to manage multiple projects under tight deadlines while delivering clear, actionable results for

Qualifications

• Bachelor’s degree in a technical field with at least 4 years of incident response experience.
• Hold one or more forensics certifications (CCE, EnCe, CFCE, GCFA/GCFE, or CSFA).
• Experience with Windows/Linux forensics, NSM, logs, and malware analysis.

Responsibilities

• Conduct digital forensics on hosts, networks, and cloud applications including log analysis and malware triage in support of incident response investigations.
• Recognize and codify attacker TTPs in indicators of compromise (IOCs) that can be applied to current and future investigations.
• Build scripts, tools, or methodologies to enhance internal investigation processes.
• Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
• Work with clients’ security and IT operations teams to implement remediation plans in response, and create/update Incident Response Plans.

Skills

Digital forensics

Threat actor TTPs

Incident response

Project leadership

Mentoring

Cloud forensics

Education

Bachelor's degree in technical field

Tools

EnCase

FTK

Wireshark

Cloud forensics tools

Job description

BW Cyber Services’ Digital Forensics Incident Response (DFIR) team seeks a subject matter expert with in-depth understanding of threat actors and attacker TTPs. The role requires leading large client-facing projects, mentoring consultants, and applying broad security knowledge to evolving attacker behavior.

The candidate should possess strong consulting skills, business acumen, and the ability to manage multiple projects under tight deadlines while delivering clear, actionable results for