Senior Forensic Lead — Incident Response & Investigations

Arete Advisors, LLC; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Arete Advisors, LLC is seeking a Senior Forensic Incident Response Lead to oversee complex investigations across ransomware, BEC, cloud, insider threat, and EIR engagements.

You will guide Windows/macOS/Linux forensic analysis, coordinate Tiger Teams, manage data collection, timelines, and client communications, and mentor analysts. This role requires 8+ years in incident response or digital forensics, Bachelor's or higher, and relevant certifications.

Qualifications

• Thorough knowledge of host-based forensics, network forensics, malware analysis and data breach response.
• Experience with a common scripting or programming language, including Perl, Python, Bash, or PowerShell.
• One or more Digital Forensic and Incident Response Certifications such as GCFE, GCFA, GNFA, GCTI, GREM, CHFI, CCE, CFC, EnCE, and CFCE, preferred.

Responsibilities

• Oversees forensics analysis and supports multiple Tiger Teams and engagements for matters beyond Ransomware/BEC matters.
• Leads investigations for projects beyond Ransomware and BEC including Cloud, insider threat, and advisory/Enterprise Incident Response (EIR) matters.
• Maintains target utilization for Tiger Team members and ensures data collection and timely analysis to tell the narrative of the threat actor’s compromise.
• Drives forensic investigations across engagements, coordinating with SOC/Threat Hunting and Negotiations teams.
• Monitors budgets, timelines, and client communications; delivers clear updates to stakeholders.

Skills

Host-based forensics

Network forensics

Malware analysis

Data breach response

Consulting experience

Education

Bachelor's Degree

Master's Degree

J.D.

GCFE

GCFA

GNFA

GCTI

GREM

CHFI

CCE

CFC

EnCE

CFCE

Tools

EnCase

Axiom

X-Ways

FTK

SIFT

ELK

Redline

Volatility

Job description

Arete Advisors, LLC is seeking a Senior Forensic Incident Response Lead to oversee complex investigations across ransomware, BEC, cloud, insider threat, and EIR engagements.

You will guide Windows/macOS/Linux forensic analysis, coordinate Tiger Teams, manage data collection, timelines, and client communications, and mentor analysts. This role requires 8+ years in incident response or digital forensics, Bachelor's or higher, and relevant certifications.